--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d758636b9d6e23af695d9f5e385686505825ff73a76b55d48de9a88c81890943","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d758636b9d6e23af695d9f5e385686505825ff73a76b55d48de9a88c81890943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:40:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:40:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d758636b9d6e23af695d9f5e385686505825ff73a76b55d48de9a88c81890943"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d81e6f132e8a41f99288adcdd25b2bed933e2e960e5d0e2ab5dc76cfb5dcaf75"} {"level":"error","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d758636b9d6e23af695d9f5e385686505825ff73a76b55d48de9a88c81890943","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d758636b9d6e23af695d9f5e385686505825ff73a76b55d48de9a88c81890943\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d758636b9d6e23af695d9f5e385686505825ff73a76b55d48de9a88c81890943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:40:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d758636b9d6e23af695d9f5e385686505825ff73a76b55d48de9a88c81890943","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d758636b9d6e23af695d9f5e385686505825ff73a76b55d48de9a88c81890943","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d758636b9d6e23af695d9f5e385686505825ff73a76b55d48de9a88c81890943"} {"level":"debug","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d758636b9d6e23af695d9f5e385686505825ff73a76b55d48de9a88c81890943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:40:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:40:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d758636b9d6e23af695d9f5e385686505825ff73a76b55d48de9a88c81890943"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d758636b9d6e23af695d9f5e385686505825ff73a76b55d48de9a88c81890943","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d758636b9d6e23af695d9f5e385686505825ff73a76b55d48de9a88c81890943","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f9832528cfa931ef6c4a4a052bd7ce29d699040d02fe591a85421a2b22e8f1aa"} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d758636b9d6e23af695d9f5e385686505825ff73a76b55d48de9a88c81890943"} {"level":"debug","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6d4c4ce868b9c509d1706258f831a0148645ac98f847a741c775a776a26c407","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:40:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6d4c4ce868b9c509d1706258f831a0148645ac98f847a741c775a776a26c407","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6d4c4ce868b9c509d1706258f831a0148645ac98f847a741c775a776a26c407","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:40:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6d4c4ce868b9c509d1706258f831a0148645ac98f847a741c775a776a26c407"} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6d4c4ce868b9c509d1706258f831a0148645ac98f847a741c775a776a26c407","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6d4c4ce868b9c509d1706258f831a0148645ac98f847a741c775a776a26c407","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6d4c4ce868b9c509d1706258f831a0148645ac98f847a741c775a776a26c407","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6d4c4ce868b9c509d1706258f831a0148645ac98f847a741c775a776a26c407"} {"level":"debug","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6d4c4ce868b9c509d1706258f831a0148645ac98f847a741c775a776a26c407","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6d4c4ce868b9c509d1706258f831a0148645ac98f847a741c775a776a26c407"} {"level":"debug","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6d4c4ce868b9c509d1706258f831a0148645ac98f847a741c775a776a26c407","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:40:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:40:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6d4c4ce868b9c509d1706258f831a0148645ac98f847a741c775a776a26c407"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6d4c4ce868b9c509d1706258f831a0148645ac98f847a741c775a776a26c407","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6d4c4ce868b9c509d1706258f831a0148645ac98f847a741c775a776a26c407","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6d4c4ce868b9c509d1706258f831a0148645ac98f847a741c775a776a26c407"} {"level":"debug","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93c70fa23b3b34639b38d96ab153668ec8c5316f31e9649861b1c4c2e13437da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:40:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93c70fa23b3b34639b38d96ab153668ec8c5316f31e9649861b1c4c2e13437da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9214ea9edf559a93611f9d8f8fe8b41cf2e2462e3e1d0883edc1d95511047d18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:40:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93c70fa23b3b34639b38d96ab153668ec8c5316f31e9649861b1c4c2e13437da"} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9214ea9edf559a93611f9d8f8fe8b41cf2e2462e3e1d0883edc1d95511047d18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"93c70fa23b3b34639b38d96ab153668ec8c5316f31e9649861b1c4c2e13437da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:40:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:40:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["93c70fa23b3b34639b38d96ab153668ec8c5316f31e9649861b1c4c2e13437da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9214ea9edf559a93611f9d8f8fe8b41cf2e2462e3e1d0883edc1d95511047d18"} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"93c70fa23b3b34639b38d96ab153668ec8c5316f31e9649861b1c4c2e13437da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9214ea9edf559a93611f9d8f8fe8b41cf2e2462e3e1d0883edc1d95511047d18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:40:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:40:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9214ea9edf559a93611f9d8f8fe8b41cf2e2462e3e1d0883edc1d95511047d18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93c70fa23b3b34639b38d96ab153668ec8c5316f31e9649861b1c4c2e13437da"} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9214ea9edf559a93611f9d8f8fe8b41cf2e2462e3e1d0883edc1d95511047d18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"93c70fa23b3b34639b38d96ab153668ec8c5316f31e9649861b1c4c2e13437da","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9214ea9edf559a93611f9d8f8fe8b41cf2e2462e3e1d0883edc1d95511047d18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:40:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9214ea9edf559a93611f9d8f8fe8b41cf2e2462e3e1d0883edc1d95511047d18"} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9214ea9edf559a93611f9d8f8fe8b41cf2e2462e3e1d0883edc1d95511047d18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9214ea9edf559a93611f9d8f8fe8b41cf2e2462e3e1d0883edc1d95511047d18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:40:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:40:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9214ea9edf559a93611f9d8f8fe8b41cf2e2462e3e1d0883edc1d95511047d18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/93c70fa23b3b34639b38d96ab153668ec8c5316f31e9649861b1c4c2e13437da"} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9214ea9edf559a93611f9d8f8fe8b41cf2e2462e3e1d0883edc1d95511047d18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21c823ebeba8b5518b566c1e7f838ac17f9002103e413aee1d373a313430931b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:40:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21c823ebeba8b5518b566c1e7f838ac17f9002103e413aee1d373a313430931b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9214ea9edf559a93611f9d8f8fe8b41cf2e2462e3e1d0883edc1d95511047d18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:40:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9214ea9edf559a93611f9d8f8fe8b41cf2e2462e3e1d0883edc1d95511047d18"} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21c823ebeba8b5518b566c1e7f838ac17f9002103e413aee1d373a313430931b"} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9214ea9edf559a93611f9d8f8fe8b41cf2e2462e3e1d0883edc1d95511047d18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51fb72a4bb6028e99b2e3bbb5006cbf6602b2f7b6d7a872b5b1070ec5bc29c96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:40:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51fb72a4bb6028e99b2e3bbb5006cbf6602b2f7b6d7a872b5b1070ec5bc29c96"} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51fb72a4bb6028e99b2e3bbb5006cbf6602b2f7b6d7a872b5b1070ec5bc29c96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21c823ebeba8b5518b566c1e7f838ac17f9002103e413aee1d373a313430931b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:40:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:40:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21c823ebeba8b5518b566c1e7f838ac17f9002103e413aee1d373a313430931b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9214ea9edf559a93611f9d8f8fe8b41cf2e2462e3e1d0883edc1d95511047d18"} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b59734645bdf4a63639568aaf185d1b8bf5b87c9c86ca92a5642ef756f5d317"} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21c823ebeba8b5518b566c1e7f838ac17f9002103e413aee1d373a313430931b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b59734645bdf4a63639568aaf185d1b8bf5b87c9c86ca92a5642ef756f5d317","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:40:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:40:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b59734645bdf4a63639568aaf185d1b8bf5b87c9c86ca92a5642ef756f5d317"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51fb72a4bb6028e99b2e3bbb5006cbf6602b2f7b6d7a872b5b1070ec5bc29c96"} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0081da3203e8abdff736a31901f3c54cf19a573c40003096382dd0ccb2257342"} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21c823ebeba8b5518b566c1e7f838ac17f9002103e413aee1d373a313430931b"} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b59734645bdf4a63639568aaf185d1b8bf5b87c9c86ca92a5642ef756f5d317","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9214ea9edf559a93611f9d8f8fe8b41cf2e2462e3e1d0883edc1d95511047d18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:40:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:40:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9214ea9edf559a93611f9d8f8fe8b41cf2e2462e3e1d0883edc1d95511047d18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9214ea9edf559a93611f9d8f8fe8b41cf2e2462e3e1d0883edc1d95511047d18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51fb72a4bb6028e99b2e3bbb5006cbf6602b2f7b6d7a872b5b1070ec5bc29c96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:40:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:40:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51fb72a4bb6028e99b2e3bbb5006cbf6602b2f7b6d7a872b5b1070ec5bc29c96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b59734645bdf4a63639568aaf185d1b8bf5b87c9c86ca92a5642ef756f5d317"} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9214ea9edf559a93611f9d8f8fe8b41cf2e2462e3e1d0883edc1d95511047d18"} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51fb72a4bb6028e99b2e3bbb5006cbf6602b2f7b6d7a872b5b1070ec5bc29c96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0081da3203e8abdff736a31901f3c54cf19a573c40003096382dd0ccb2257342","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:40:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:40:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0081da3203e8abdff736a31901f3c54cf19a573c40003096382dd0ccb2257342"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51fb72a4bb6028e99b2e3bbb5006cbf6602b2f7b6d7a872b5b1070ec5bc29c96"} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0081da3203e8abdff736a31901f3c54cf19a573c40003096382dd0ccb2257342","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21c823ebeba8b5518b566c1e7f838ac17f9002103e413aee1d373a313430931b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b59734645bdf4a63639568aaf185d1b8bf5b87c9c86ca92a5642ef756f5d317","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9214ea9edf559a93611f9d8f8fe8b41cf2e2462e3e1d0883edc1d95511047d18","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51fb72a4bb6028e99b2e3bbb5006cbf6602b2f7b6d7a872b5b1070ec5bc29c96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0081da3203e8abdff736a31901f3c54cf19a573c40003096382dd0ccb2257342","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:40:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:40:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0081da3203e8abdff736a31901f3c54cf19a573c40003096382dd0ccb2257342"} {"level":"info","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0081da3203e8abdff736a31901f3c54cf19a573c40003096382dd0ccb2257342","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0081da3203e8abdff736a31901f3c54cf19a573c40003096382dd0ccb2257342","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0081da3203e8abdff736a31901f3c54cf19a573c40003096382dd0ccb2257342","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0081da3203e8abdff736a31901f3c54cf19a573c40003096382dd0ccb2257342"} {"level":"debug","ts":"2026-07-06T20:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0081da3203e8abdff736a31901f3c54cf19a573c40003096382dd0ccb2257342","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:40:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:40:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0081da3203e8abdff736a31901f3c54cf19a573c40003096382dd0ccb2257342"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0081da3203e8abdff736a31901f3c54cf19a573c40003096382dd0ccb2257342","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0081da3203e8abdff736a31901f3c54cf19a573c40003096382dd0ccb2257342","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:40:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0081da3203e8abdff736a31901f3c54cf19a573c40003096382dd0ccb2257342"} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea0f600c63d9134657515ffd3acc4fb14d69718b1dd26ae3f0882420254a7ad6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea0f600c63d9134657515ffd3acc4fb14d69718b1dd26ae3f0882420254a7ad6"} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea0f600c63d9134657515ffd3acc4fb14d69718b1dd26ae3f0882420254a7ad6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea0f600c63d9134657515ffd3acc4fb14d69718b1dd26ae3f0882420254a7ad6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea0f600c63d9134657515ffd3acc4fb14d69718b1dd26ae3f0882420254a7ad6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea0f600c63d9134657515ffd3acc4fb14d69718b1dd26ae3f0882420254a7ad6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea0f600c63d9134657515ffd3acc4fb14d69718b1dd26ae3f0882420254a7ad6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea0f600c63d9134657515ffd3acc4fb14d69718b1dd26ae3f0882420254a7ad6"} {"level":"error","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ea0f600c63d9134657515ffd3acc4fb14d69718b1dd26ae3f0882420254a7ad6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ea0f600c63d9134657515ffd3acc4fb14d69718b1dd26ae3f0882420254a7ad6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea0f600c63d9134657515ffd3acc4fb14d69718b1dd26ae3f0882420254a7ad6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea0f600c63d9134657515ffd3acc4fb14d69718b1dd26ae3f0882420254a7ad6"} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea0f600c63d9134657515ffd3acc4fb14d69718b1dd26ae3f0882420254a7ad6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea0f600c63d9134657515ffd3acc4fb14d69718b1dd26ae3f0882420254a7ad6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea0f600c63d9134657515ffd3acc4fb14d69718b1dd26ae3f0882420254a7ad6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea0f600c63d9134657515ffd3acc4fb14d69718b1dd26ae3f0882420254a7ad6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea0f600c63d9134657515ffd3acc4fb14d69718b1dd26ae3f0882420254a7ad6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea0f600c63d9134657515ffd3acc4fb14d69718b1dd26ae3f0882420254a7ad6"} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea0f600c63d9134657515ffd3acc4fb14d69718b1dd26ae3f0882420254a7ad6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea0f600c63d9134657515ffd3acc4fb14d69718b1dd26ae3f0882420254a7ad6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea0f600c63d9134657515ffd3acc4fb14d69718b1dd26ae3f0882420254a7ad6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea0f600c63d9134657515ffd3acc4fb14d69718b1dd26ae3f0882420254a7ad6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea0f600c63d9134657515ffd3acc4fb14d69718b1dd26ae3f0882420254a7ad6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea0f600c63d9134657515ffd3acc4fb14d69718b1dd26ae3f0882420254a7ad6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea0f600c63d9134657515ffd3acc4fb14d69718b1dd26ae3f0882420254a7ad6"} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea0f600c63d9134657515ffd3acc4fb14d69718b1dd26ae3f0882420254a7ad6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea0f600c63d9134657515ffd3acc4fb14d69718b1dd26ae3f0882420254a7ad6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea0f600c63d9134657515ffd3acc4fb14d69718b1dd26ae3f0882420254a7ad6"} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea0f600c63d9134657515ffd3acc4fb14d69718b1dd26ae3f0882420254a7ad6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea0f600c63d9134657515ffd3acc4fb14d69718b1dd26ae3f0882420254a7ad6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea0f600c63d9134657515ffd3acc4fb14d69718b1dd26ae3f0882420254a7ad6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea0f600c63d9134657515ffd3acc4fb14d69718b1dd26ae3f0882420254a7ad6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea0f600c63d9134657515ffd3acc4fb14d69718b1dd26ae3f0882420254a7ad6"} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9d48aa16fc2a506a165555f576a634f15be2fdd31a3cda647af00b8d6567244","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9d48aa16fc2a506a165555f576a634f15be2fdd31a3cda647af00b8d6567244","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9d48aa16fc2a506a165555f576a634f15be2fdd31a3cda647af00b8d6567244","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9d48aa16fc2a506a165555f576a634f15be2fdd31a3cda647af00b8d6567244"} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9d48aa16fc2a506a165555f576a634f15be2fdd31a3cda647af00b8d6567244","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9d48aa16fc2a506a165555f576a634f15be2fdd31a3cda647af00b8d6567244","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a9d48aa16fc2a506a165555f576a634f15be2fdd31a3cda647af00b8d6567244","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a9d48aa16fc2a506a165555f576a634f15be2fdd31a3cda647af00b8d6567244\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9d48aa16fc2a506a165555f576a634f15be2fdd31a3cda647af00b8d6567244","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9d48aa16fc2a506a165555f576a634f15be2fdd31a3cda647af00b8d6567244"} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9d48aa16fc2a506a165555f576a634f15be2fdd31a3cda647af00b8d6567244","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9d48aa16fc2a506a165555f576a634f15be2fdd31a3cda647af00b8d6567244"} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9d48aa16fc2a506a165555f576a634f15be2fdd31a3cda647af00b8d6567244","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9d48aa16fc2a506a165555f576a634f15be2fdd31a3cda647af00b8d6567244"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9d48aa16fc2a506a165555f576a634f15be2fdd31a3cda647af00b8d6567244","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9d48aa16fc2a506a165555f576a634f15be2fdd31a3cda647af00b8d6567244","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9d48aa16fc2a506a165555f576a634f15be2fdd31a3cda647af00b8d6567244","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9d48aa16fc2a506a165555f576a634f15be2fdd31a3cda647af00b8d6567244","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9d48aa16fc2a506a165555f576a634f15be2fdd31a3cda647af00b8d6567244","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9d48aa16fc2a506a165555f576a634f15be2fdd31a3cda647af00b8d6567244"} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9d48aa16fc2a506a165555f576a634f15be2fdd31a3cda647af00b8d6567244","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9d48aa16fc2a506a165555f576a634f15be2fdd31a3cda647af00b8d6567244"} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9d48aa16fc2a506a165555f576a634f15be2fdd31a3cda647af00b8d6567244","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9d48aa16fc2a506a165555f576a634f15be2fdd31a3cda647af00b8d6567244"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9d48aa16fc2a506a165555f576a634f15be2fdd31a3cda647af00b8d6567244","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9d48aa16fc2a506a165555f576a634f15be2fdd31a3cda647af00b8d6567244","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9d48aa16fc2a506a165555f576a634f15be2fdd31a3cda647af00b8d6567244","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9d48aa16fc2a506a165555f576a634f15be2fdd31a3cda647af00b8d6567244","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9d48aa16fc2a506a165555f576a634f15be2fdd31a3cda647af00b8d6567244"} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9d48aa16fc2a506a165555f576a634f15be2fdd31a3cda647af00b8d6567244","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9d48aa16fc2a506a165555f576a634f15be2fdd31a3cda647af00b8d6567244","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9d48aa16fc2a506a165555f576a634f15be2fdd31a3cda647af00b8d6567244"} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c5e919383b9fb38c2ca7588aefd0dbb0278dff7ca2a63c7414a287e5d8cfa89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c5e919383b9fb38c2ca7588aefd0dbb0278dff7ca2a63c7414a287e5d8cfa89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c5e919383b9fb38c2ca7588aefd0dbb0278dff7ca2a63c7414a287e5d8cfa89","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c5e919383b9fb38c2ca7588aefd0dbb0278dff7ca2a63c7414a287e5d8cfa89"} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c5e919383b9fb38c2ca7588aefd0dbb0278dff7ca2a63c7414a287e5d8cfa89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9d48aa16fc2a506a165555f576a634f15be2fdd31a3cda647af00b8d6567244","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9d48aa16fc2a506a165555f576a634f15be2fdd31a3cda647af00b8d6567244"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c5e919383b9fb38c2ca7588aefd0dbb0278dff7ca2a63c7414a287e5d8cfa89"} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9d48aa16fc2a506a165555f576a634f15be2fdd31a3cda647af00b8d6567244","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c5e919383b9fb38c2ca7588aefd0dbb0278dff7ca2a63c7414a287e5d8cfa89","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c5e919383b9fb38c2ca7588aefd0dbb0278dff7ca2a63c7414a287e5d8cfa89"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9d48aa16fc2a506a165555f576a634f15be2fdd31a3cda647af00b8d6567244"} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c5e919383b9fb38c2ca7588aefd0dbb0278dff7ca2a63c7414a287e5d8cfa89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9d48aa16fc2a506a165555f576a634f15be2fdd31a3cda647af00b8d6567244","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c5e919383b9fb38c2ca7588aefd0dbb0278dff7ca2a63c7414a287e5d8cfa89","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e9ba108426185da1e0d8cb977e13a0fa2341914d92a996e0191214042067113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c5e919383b9fb38c2ca7588aefd0dbb0278dff7ca2a63c7414a287e5d8cfa89"} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e9ba108426185da1e0d8cb977e13a0fa2341914d92a996e0191214042067113"} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e9ba108426185da1e0d8cb977e13a0fa2341914d92a996e0191214042067113","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e9ba108426185da1e0d8cb977e13a0fa2341914d92a996e0191214042067113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e9ba108426185da1e0d8cb977e13a0fa2341914d92a996e0191214042067113"} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e9ba108426185da1e0d8cb977e13a0fa2341914d92a996e0191214042067113","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e9ba108426185da1e0d8cb977e13a0fa2341914d92a996e0191214042067113","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e9ba108426185da1e0d8cb977e13a0fa2341914d92a996e0191214042067113","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e9ba108426185da1e0d8cb977e13a0fa2341914d92a996e0191214042067113"} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e9ba108426185da1e0d8cb977e13a0fa2341914d92a996e0191214042067113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e9ba108426185da1e0d8cb977e13a0fa2341914d92a996e0191214042067113"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e9ba108426185da1e0d8cb977e13a0fa2341914d92a996e0191214042067113","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e9ba108426185da1e0d8cb977e13a0fa2341914d92a996e0191214042067113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e9ba108426185da1e0d8cb977e13a0fa2341914d92a996e0191214042067113"} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e9ba108426185da1e0d8cb977e13a0fa2341914d92a996e0191214042067113","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e9ba108426185da1e0d8cb977e13a0fa2341914d92a996e0191214042067113","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e9ba108426185da1e0d8cb977e13a0fa2341914d92a996e0191214042067113"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e9ba108426185da1e0d8cb977e13a0fa2341914d92a996e0191214042067113","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e9ba108426185da1e0d8cb977e13a0fa2341914d92a996e0191214042067113"} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e9ba108426185da1e0d8cb977e13a0fa2341914d92a996e0191214042067113","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e116bda90a4205aff335383ce8d2b8f337088b9a9368287e748895186d5e701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e116bda90a4205aff335383ce8d2b8f337088b9a9368287e748895186d5e701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e116bda90a4205aff335383ce8d2b8f337088b9a9368287e748895186d5e701"} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e116bda90a4205aff335383ce8d2b8f337088b9a9368287e748895186d5e701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e116bda90a4205aff335383ce8d2b8f337088b9a9368287e748895186d5e701"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e116bda90a4205aff335383ce8d2b8f337088b9a9368287e748895186d5e701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e116bda90a4205aff335383ce8d2b8f337088b9a9368287e748895186d5e701","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:40:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e116bda90a4205aff335383ce8d2b8f337088b9a9368287e748895186d5e701"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e9ba108426185da1e0d8cb977e13a0fa2341914d92a996e0191214042067113"} {"level":"error","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2e116bda90a4205aff335383ce8d2b8f337088b9a9368287e748895186d5e701","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2e116bda90a4205aff335383ce8d2b8f337088b9a9368287e748895186d5e701\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T20:40:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e116bda90a4205aff335383ce8d2b8f337088b9a9368287e748895186d5e701","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e116bda90a4205aff335383ce8d2b8f337088b9a9368287e748895186d5e701","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"} {"level":"info","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e116bda90a4205aff335383ce8d2b8f337088b9a9368287e748895186d5e701"} {"level":"debug","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60e82100be4361b7b0a33f75685e09ac280b715d53786b7815cf5e558335de6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:40:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:40:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60e82100be4361b7b0a33f75685e09ac280b715d53786b7815cf5e558335de6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60e82100be4361b7b0a33f75685e09ac280b715d53786b7815cf5e558335de6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:40:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:40:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60e82100be4361b7b0a33f75685e09ac280b715d53786b7815cf5e558335de6c"} {"level":"info","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60e82100be4361b7b0a33f75685e09ac280b715d53786b7815cf5e558335de6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60e82100be4361b7b0a33f75685e09ac280b715d53786b7815cf5e558335de6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:40:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:40:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60e82100be4361b7b0a33f75685e09ac280b715d53786b7815cf5e558335de6c"} {"level":"error","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"60e82100be4361b7b0a33f75685e09ac280b715d53786b7815cf5e558335de6c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"60e82100be4361b7b0a33f75685e09ac280b715d53786b7815cf5e558335de6c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60e82100be4361b7b0a33f75685e09ac280b715d53786b7815cf5e558335de6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60e82100be4361b7b0a33f75685e09ac280b715d53786b7815cf5e558335de6c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60e82100be4361b7b0a33f75685e09ac280b715d53786b7815cf5e558335de6c"} {"level":"debug","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3f9330b25ee8ac864d1d9b0c3622b68db509383df3d76b1ca0b0e3650f3732a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:40:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:40:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3f9330b25ee8ac864d1d9b0c3622b68db509383df3d76b1ca0b0e3650f3732a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3f9330b25ee8ac864d1d9b0c3622b68db509383df3d76b1ca0b0e3650f3732a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3f9330b25ee8ac864d1d9b0c3622b68db509383df3d76b1ca0b0e3650f3732a"} {"level":"debug","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3f9330b25ee8ac864d1d9b0c3622b68db509383df3d76b1ca0b0e3650f3732a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60e82100be4361b7b0a33f75685e09ac280b715d53786b7815cf5e558335de6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:40:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:40:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60e82100be4361b7b0a33f75685e09ac280b715d53786b7815cf5e558335de6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3f9330b25ee8ac864d1d9b0c3622b68db509383df3d76b1ca0b0e3650f3732a"} {"level":"info","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60e82100be4361b7b0a33f75685e09ac280b715d53786b7815cf5e558335de6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3f9330b25ee8ac864d1d9b0c3622b68db509383df3d76b1ca0b0e3650f3732a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:40:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:40:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3f9330b25ee8ac864d1d9b0c3622b68db509383df3d76b1ca0b0e3650f3732a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3f9330b25ee8ac864d1d9b0c3622b68db509383df3d76b1ca0b0e3650f3732a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60e82100be4361b7b0a33f75685e09ac280b715d53786b7815cf5e558335de6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:40:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:40:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60e82100be4361b7b0a33f75685e09ac280b715d53786b7815cf5e558335de6c"} {"level":"info","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60e82100be4361b7b0a33f75685e09ac280b715d53786b7815cf5e558335de6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3f9330b25ee8ac864d1d9b0c3622b68db509383df3d76b1ca0b0e3650f3732a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:40:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:40:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3f9330b25ee8ac864d1d9b0c3622b68db509383df3d76b1ca0b0e3650f3732a"} {"level":"info","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3f9330b25ee8ac864d1d9b0c3622b68db509383df3d76b1ca0b0e3650f3732a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60e82100be4361b7b0a33f75685e09ac280b715d53786b7815cf5e558335de6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3f9330b25ee8ac864d1d9b0c3622b68db509383df3d76b1ca0b0e3650f3732a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:40:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:40:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3f9330b25ee8ac864d1d9b0c3622b68db509383df3d76b1ca0b0e3650f3732a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60e82100be4361b7b0a33f75685e09ac280b715d53786b7815cf5e558335de6c"} {"level":"info","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3f9330b25ee8ac864d1d9b0c3622b68db509383df3d76b1ca0b0e3650f3732a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dc149239f705d21609e0d042b461383983e8fdb599cd9003df5ff1c0ef89e32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:40:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:40:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3f9330b25ee8ac864d1d9b0c3622b68db509383df3d76b1ca0b0e3650f3732a"} {"level":"info","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dc149239f705d21609e0d042b461383983e8fdb599cd9003df5ff1c0ef89e32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60e82100be4361b7b0a33f75685e09ac280b715d53786b7815cf5e558335de6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:40:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:40:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60e82100be4361b7b0a33f75685e09ac280b715d53786b7815cf5e558335de6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60e82100be4361b7b0a33f75685e09ac280b715d53786b7815cf5e558335de6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3f9330b25ee8ac864d1d9b0c3622b68db509383df3d76b1ca0b0e3650f3732a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dc149239f705d21609e0d042b461383983e8fdb599cd9003df5ff1c0ef89e32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:40:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:40:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dc149239f705d21609e0d042b461383983e8fdb599cd9003df5ff1c0ef89e32"} {"level":"info","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dc149239f705d21609e0d042b461383983e8fdb599cd9003df5ff1c0ef89e32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60e82100be4361b7b0a33f75685e09ac280b715d53786b7815cf5e558335de6c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7dc149239f705d21609e0d042b461383983e8fdb599cd9003df5ff1c0ef89e32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:40:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:40:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7dc149239f705d21609e0d042b461383983e8fdb599cd9003df5ff1c0ef89e32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3f9330b25ee8ac864d1d9b0c3622b68db509383df3d76b1ca0b0e3650f3732a"} {"level":"info","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7dc149239f705d21609e0d042b461383983e8fdb599cd9003df5ff1c0ef89e32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd4b203d4235cfad6ea93c676833d86d31c5adc97905c89b451bf96130287fb4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:40:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:40:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd4b203d4235cfad6ea93c676833d86d31c5adc97905c89b451bf96130287fb4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dc149239f705d21609e0d042b461383983e8fdb599cd9003df5ff1c0ef89e32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd4b203d4235cfad6ea93c676833d86d31c5adc97905c89b451bf96130287fb4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd4b203d4235cfad6ea93c676833d86d31c5adc97905c89b451bf96130287fb4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60e82100be4361b7b0a33f75685e09ac280b715d53786b7815cf5e558335de6c"} {"level":"debug","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd4b203d4235cfad6ea93c676833d86d31c5adc97905c89b451bf96130287fb4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd4b203d4235cfad6ea93c676833d86d31c5adc97905c89b451bf96130287fb4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dc149239f705d21609e0d042b461383983e8fdb599cd9003df5ff1c0ef89e32"} {"level":"info","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd4b203d4235cfad6ea93c676833d86d31c5adc97905c89b451bf96130287fb4"} {"level":"debug","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd4b203d4235cfad6ea93c676833d86d31c5adc97905c89b451bf96130287fb4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:40:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:40:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd4b203d4235cfad6ea93c676833d86d31c5adc97905c89b451bf96130287fb4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd4b203d4235cfad6ea93c676833d86d31c5adc97905c89b451bf96130287fb4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd4b203d4235cfad6ea93c676833d86d31c5adc97905c89b451bf96130287fb4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:40:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd4b203d4235cfad6ea93c676833d86d31c5adc97905c89b451bf96130287fb4"} {"level":"info","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5c16bab-88d4-4a56-9b57-0901afd419ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51302","PortSpecifier":{"PortValue":51302}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a5c16bab-88d4-4a56-9b57-0901afd419ea","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5c16bab-88d4-4a56-9b57-0901afd419ea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51302","PortSpecifier":{"PortValue":51302}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370458,"nanos":682734793},"http":{"id":"a5c16bab-88d4-4a56-9b57-0901afd419ea","method":"POST","headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a5c16bab-88d4-4a56-9b57-0901afd419ea","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a5c16bab-88d4-4a56-9b57-0901afd419ea","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"]}} {"level":"debug","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a5c16bab-88d4-4a56-9b57-0901afd419ea","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5b59734645bdf4a63639568aaf185d1b8bf5b87c9c86ca92a5642ef756f5d317"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5c16bab-88d4-4a56-9b57-0901afd419ea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5c16bab-88d4-4a56-9b57-0901afd419ea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5c16bab-88d4-4a56-9b57-0901afd419ea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-37e178/auth-test-model-37e178\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a5c16bab-88d4-4a56-9b57-0901afd419ea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5c16bab-88d4-4a56-9b57-0901afd419ea","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5c16bab-88d4-4a56-9b57-0901afd419ea","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5c16bab-88d4-4a56-9b57-0901afd419ea","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5c16bab-88d4-4a56-9b57-0901afd419ea","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3c4f7ff-1e74-49ef-9e93-ea997d3fde69","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33630","PortSpecifier":{"PortValue":33630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f3c4f7ff-1e74-49ef-9e93-ea997d3fde69","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3c4f7ff-1e74-49ef-9e93-ea997d3fde69","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33630","PortSpecifier":{"PortValue":33630}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370458,"nanos":740996303},"http":{"id":"f3c4f7ff-1e74-49ef-9e93-ea997d3fde69","method":"POST","headers":{":authority":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f3c4f7ff-1e74-49ef-9e93-ea997d3fde69","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f3c4f7ff-1e74-49ef-9e93-ea997d3fde69","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"]}} {"level":"debug","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f3c4f7ff-1e74-49ef-9e93-ea997d3fde69","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3c4f7ff-1e74-49ef-9e93-ea997d3fde69","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3c4f7ff-1e74-49ef-9e93-ea997d3fde69","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3c4f7ff-1e74-49ef-9e93-ea997d3fde69","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-67755c/auth-test-model-67755c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f3c4f7ff-1e74-49ef-9e93-ea997d3fde69","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3c4f7ff-1e74-49ef-9e93-ea997d3fde69","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3c4f7ff-1e74-49ef-9e93-ea997d3fde69","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3c4f7ff-1e74-49ef-9e93-ea997d3fde69","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3c4f7ff-1e74-49ef-9e93-ea997d3fde69","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dfcd735c-2d18-45ac-8e78-09065f2ac7a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51318","PortSpecifier":{"PortValue":51318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dfcd735c-2d18-45ac-8e78-09065f2ac7a7","method":"GET","path":"/maas-api/v1/api-keys/7ad89bb5-e89c-43f6-a0ea-161353c788c4","host":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dfcd735c-2d18-45ac-8e78-09065f2ac7a7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:51318","PortSpecifier":{"PortValue":51318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370458,"nanos":822531879},"http":{"id":"dfcd735c-2d18-45ac-8e78-09065f2ac7a7","method":"GET","headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7ad89bb5-e89c-43f6-a0ea-161353c788c4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dfcd735c-2d18-45ac-8e78-09065f2ac7a7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dfcd735c-2d18-45ac-8e78-09065f2ac7a7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"]}} {"level":"debug","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dfcd735c-2d18-45ac-8e78-09065f2ac7a7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5b59734645bdf4a63639568aaf185d1b8bf5b87c9c86ca92a5642ef756f5d317"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7ad89bb5-e89c-43f6-a0ea-161353c788c4",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dfcd735c-2d18-45ac-8e78-09065f2ac7a7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dfcd735c-2d18-45ac-8e78-09065f2ac7a7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dfcd735c-2d18-45ac-8e78-09065f2ac7a7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-37e178/auth-test-model-37e178\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dfcd735c-2d18-45ac-8e78-09065f2ac7a7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dfcd735c-2d18-45ac-8e78-09065f2ac7a7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dfcd735c-2d18-45ac-8e78-09065f2ac7a7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dfcd735c-2d18-45ac-8e78-09065f2ac7a7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dfcd735c-2d18-45ac-8e78-09065f2ac7a7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44a64a40-704c-4e4b-b216-4d671088702d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33636","PortSpecifier":{"PortValue":33636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"44a64a40-704c-4e4b-b216-4d671088702d","method":"GET","path":"/maas-api/v1/api-keys/2a36f6b5-ce07-4ff5-be37-6985feaec1da","host":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"44a64a40-704c-4e4b-b216-4d671088702d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33636","PortSpecifier":{"PortValue":33636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370458,"nanos":863272568},"http":{"id":"44a64a40-704c-4e4b-b216-4d671088702d","method":"GET","headers":{":authority":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2a36f6b5-ce07-4ff5-be37-6985feaec1da",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"44a64a40-704c-4e4b-b216-4d671088702d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"44a64a40-704c-4e4b-b216-4d671088702d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"]}} {"level":"debug","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"44a64a40-704c-4e4b-b216-4d671088702d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/2a36f6b5-ce07-4ff5-be37-6985feaec1da",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44a64a40-704c-4e4b-b216-4d671088702d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44a64a40-704c-4e4b-b216-4d671088702d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"44a64a40-704c-4e4b-b216-4d671088702d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-67755c/auth-test-model-67755c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"44a64a40-704c-4e4b-b216-4d671088702d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44a64a40-704c-4e4b-b216-4d671088702d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"44a64a40-704c-4e4b-b216-4d671088702d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44a64a40-704c-4e4b-b216-4d671088702d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:40:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"44a64a40-704c-4e4b-b216-4d671088702d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:41:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba8eac9f-7bd1-4944-a3d6-5f2a2768953d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:45546","PortSpecifier":{"PortValue":45546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ba8eac9f-7bd1-4944-a3d6-5f2a2768953d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:41:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba8eac9f-7bd1-4944-a3d6-5f2a2768953d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:45546","PortSpecifier":{"PortValue":45546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370479,"nanos":22901167},"http":{"id":"ba8eac9f-7bd1-4944-a3d6-5f2a2768953d","method":"POST","headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:41:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ba8eac9f-7bd1-4944-a3d6-5f2a2768953d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:41:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ba8eac9f-7bd1-4944-a3d6-5f2a2768953d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"]}} {"level":"debug","ts":"2026-07-06T20:41:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ba8eac9f-7bd1-4944-a3d6-5f2a2768953d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5b59734645bdf4a63639568aaf185d1b8bf5b87c9c86ca92a5642ef756f5d317"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:41:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba8eac9f-7bd1-4944-a3d6-5f2a2768953d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:41:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba8eac9f-7bd1-4944-a3d6-5f2a2768953d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:41:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba8eac9f-7bd1-4944-a3d6-5f2a2768953d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-37e178/auth-test-model-37e178\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:41:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ba8eac9f-7bd1-4944-a3d6-5f2a2768953d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:41:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba8eac9f-7bd1-4944-a3d6-5f2a2768953d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:41:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba8eac9f-7bd1-4944-a3d6-5f2a2768953d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T20:41:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba8eac9f-7bd1-4944-a3d6-5f2a2768953d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:41:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba8eac9f-7bd1-4944-a3d6-5f2a2768953d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:41:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ccbf225c-ed87-4e28-9a63-6b1eb14709aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50042","PortSpecifier":{"PortValue":50042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ccbf225c-ed87-4e28-9a63-6b1eb14709aa","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:41:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ccbf225c-ed87-4e28-9a63-6b1eb14709aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50042","PortSpecifier":{"PortValue":50042}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370479,"nanos":61938701},"http":{"id":"ccbf225c-ed87-4e28-9a63-6b1eb14709aa","method":"POST","headers":{":authority":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:41:19Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ccbf225c-ed87-4e28-9a63-6b1eb14709aa","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:41:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ccbf225c-ed87-4e28-9a63-6b1eb14709aa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"]}} {"level":"debug","ts":"2026-07-06T20:41:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ccbf225c-ed87-4e28-9a63-6b1eb14709aa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:41:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ccbf225c-ed87-4e28-9a63-6b1eb14709aa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:41:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ccbf225c-ed87-4e28-9a63-6b1eb14709aa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:41:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ccbf225c-ed87-4e28-9a63-6b1eb14709aa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-67755c/auth-test-model-67755c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:41:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ccbf225c-ed87-4e28-9a63-6b1eb14709aa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:41:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ccbf225c-ed87-4e28-9a63-6b1eb14709aa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:41:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ccbf225c-ed87-4e28-9a63-6b1eb14709aa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T20:41:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ccbf225c-ed87-4e28-9a63-6b1eb14709aa","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:41:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ccbf225c-ed87-4e28-9a63-6b1eb14709aa","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:41:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ccd6642-3902-4663-a4c8-5c82fd40c09c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:45550","PortSpecifier":{"PortValue":45550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2ccd6642-3902-4663-a4c8-5c82fd40c09c","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:41:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ccd6642-3902-4663-a4c8-5c82fd40c09c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:45550","PortSpecifier":{"PortValue":45550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370479,"nanos":103772101},"http":{"id":"2ccd6642-3902-4663-a4c8-5c82fd40c09c","method":"GET","headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:41:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2ccd6642-3902-4663-a4c8-5c82fd40c09c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1CB8PJB48mOdfVOjA_AEk0SbN5h7v1dOPZT1AQ3QMB04715alpRAoKpYXFITx"} {"level":"debug","ts":"2026-07-06T20:41:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2ccd6642-3902-4663-a4c8-5c82fd40c09c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1CB8PJB48mOdfVOjA_AEk0SbN5h7v1dOPZT1AQ3QMB04715alpRAoKpYXFITx\"}"} {"level":"debug","ts":"2026-07-06T20:41:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2ccd6642-3902-4663-a4c8-5c82fd40c09c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8164bef2-3bb8-4bd7-85e9-b18941cd9fef","keyName":"e2e-auth-iso-a-c55dbb","subscription":"e2e-auth-iso-478f04","tenant":"e2e-shared-a-37e178","userId":"8164bef2-3bb8-4bd7-85e9-b18941cd9fef","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T20:41:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2ccd6642-3902-4663-a4c8-5c82fd40c09c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:41:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ccd6642-3902-4663-a4c8-5c82fd40c09c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:41:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ccd6642-3902-4663-a4c8-5c82fd40c09c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:41:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ccd6642-3902-4663-a4c8-5c82fd40c09c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-37e178/auth-test-model-37e178\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:41:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2ccd6642-3902-4663-a4c8-5c82fd40c09c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-06T20:41:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ccd6642-3902-4663-a4c8-5c82fd40c09c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:41:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ccd6642-3902-4663-a4c8-5c82fd40c09c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-478f04"} {"level":"debug","ts":"2026-07-06T20:41:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ccd6642-3902-4663-a4c8-5c82fd40c09c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T20:41:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ccd6642-3902-4663-a4c8-5c82fd40c09c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:41:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ccd6642-3902-4663-a4c8-5c82fd40c09c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:41:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ec9d9cd-df85-48ed-8031-fcf5a36f7bc5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:42332","PortSpecifier":{"PortValue":42332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3ec9d9cd-df85-48ed-8031-fcf5a36f7bc5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:41:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ec9d9cd-df85-48ed-8031-fcf5a36f7bc5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:42332","PortSpecifier":{"PortValue":42332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370496,"nanos":224415291},"http":{"id":"3ec9d9cd-df85-48ed-8031-fcf5a36f7bc5","method":"POST","headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:41:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3ec9d9cd-df85-48ed-8031-fcf5a36f7bc5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:41:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3ec9d9cd-df85-48ed-8031-fcf5a36f7bc5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"]}} {"level":"debug","ts":"2026-07-06T20:41:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3ec9d9cd-df85-48ed-8031-fcf5a36f7bc5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5b59734645bdf4a63639568aaf185d1b8bf5b87c9c86ca92a5642ef756f5d317"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:41:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ec9d9cd-df85-48ed-8031-fcf5a36f7bc5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:41:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ec9d9cd-df85-48ed-8031-fcf5a36f7bc5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:41:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ec9d9cd-df85-48ed-8031-fcf5a36f7bc5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-37e178/auth-test-model-37e178\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:41:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3ec9d9cd-df85-48ed-8031-fcf5a36f7bc5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:41:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ec9d9cd-df85-48ed-8031-fcf5a36f7bc5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T20:41:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ec9d9cd-df85-48ed-8031-fcf5a36f7bc5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T20:41:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ec9d9cd-df85-48ed-8031-fcf5a36f7bc5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:41:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ec9d9cd-df85-48ed-8031-fcf5a36f7bc5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:41:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5cac432-3e37-4fcd-bfde-c321cc765e41","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:48878","PortSpecifier":{"PortValue":48878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a5cac432-3e37-4fcd-bfde-c321cc765e41","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:41:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5cac432-3e37-4fcd-bfde-c321cc765e41","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:48878","PortSpecifier":{"PortValue":48878}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370496,"nanos":262567356},"http":{"id":"a5cac432-3e37-4fcd-bfde-c321cc765e41","method":"POST","headers":{":authority":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:41:36Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a5cac432-3e37-4fcd-bfde-c321cc765e41","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:41:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a5cac432-3e37-4fcd-bfde-c321cc765e41","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"]}} {"level":"debug","ts":"2026-07-06T20:41:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a5cac432-3e37-4fcd-bfde-c321cc765e41","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:41:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5cac432-3e37-4fcd-bfde-c321cc765e41","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:41:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5cac432-3e37-4fcd-bfde-c321cc765e41","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:41:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5cac432-3e37-4fcd-bfde-c321cc765e41","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-67755c/auth-test-model-67755c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:41:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a5cac432-3e37-4fcd-bfde-c321cc765e41","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:41:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5cac432-3e37-4fcd-bfde-c321cc765e41","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:41:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5cac432-3e37-4fcd-bfde-c321cc765e41","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T20:41:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5cac432-3e37-4fcd-bfde-c321cc765e41","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:41:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5cac432-3e37-4fcd-bfde-c321cc765e41","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:41:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af741f42-faca-434c-a82e-a5752cad3c3e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:48892","PortSpecifier":{"PortValue":48892}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"af741f42-faca-434c-a82e-a5752cad3c3e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:41:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"af741f42-faca-434c-a82e-a5752cad3c3e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:48892","PortSpecifier":{"PortValue":48892}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370496,"nanos":295882882},"http":{"id":"af741f42-faca-434c-a82e-a5752cad3c3e","method":"GET","headers":{":authority":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:41:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"af741f42-faca-434c-a82e-a5752cad3c3e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-y8hmdcuEWCdoVxAS_vwuPd7Q1AtFCw7dn46wDCOswcpzqlRamYgAK90N05jg"} {"level":"debug","ts":"2026-07-06T20:41:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"af741f42-faca-434c-a82e-a5752cad3c3e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-67755c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-y8hmdcuEWCdoVxAS_vwuPd7Q1AtFCw7dn46wDCOswcpzqlRamYgAK90N05jg\"}"} {"level":"debug","ts":"2026-07-06T20:41:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"af741f42-faca-434c-a82e-a5752cad3c3e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-67755c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-06T20:41:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"af741f42-faca-434c-a82e-a5752cad3c3e","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:41:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"af741f42-faca-434c-a82e-a5752cad3c3e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:41:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"af741f42-faca-434c-a82e-a5752cad3c3e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-06T20:41:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af741f42-faca-434c-a82e-a5752cad3c3e","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-06T20:41:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"af741f42-faca-434c-a82e-a5752cad3c3e","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc9d1a48-53bf-4114-931c-d07bb9c47783","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:56260","PortSpecifier":{"PortValue":56260}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bc9d1a48-53bf-4114-931c-d07bb9c47783","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc9d1a48-53bf-4114-931c-d07bb9c47783","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:56260","PortSpecifier":{"PortValue":56260}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370511,"nanos":433030372},"http":{"id":"bc9d1a48-53bf-4114-931c-d07bb9c47783","method":"POST","headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bc9d1a48-53bf-4114-931c-d07bb9c47783","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bc9d1a48-53bf-4114-931c-d07bb9c47783","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"]}} {"level":"debug","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bc9d1a48-53bf-4114-931c-d07bb9c47783","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5b59734645bdf4a63639568aaf185d1b8bf5b87c9c86ca92a5642ef756f5d317"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc9d1a48-53bf-4114-931c-d07bb9c47783","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc9d1a48-53bf-4114-931c-d07bb9c47783","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc9d1a48-53bf-4114-931c-d07bb9c47783","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-37e178/auth-test-model-37e178\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bc9d1a48-53bf-4114-931c-d07bb9c47783","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc9d1a48-53bf-4114-931c-d07bb9c47783","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc9d1a48-53bf-4114-931c-d07bb9c47783","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc9d1a48-53bf-4114-931c-d07bb9c47783","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc9d1a48-53bf-4114-931c-d07bb9c47783","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37aa6941-3a28-4b40-85ed-9b6b4abd163f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49904","PortSpecifier":{"PortValue":49904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"37aa6941-3a28-4b40-85ed-9b6b4abd163f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"37aa6941-3a28-4b40-85ed-9b6b4abd163f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49904","PortSpecifier":{"PortValue":49904}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370511,"nanos":474498452},"http":{"id":"37aa6941-3a28-4b40-85ed-9b6b4abd163f","method":"POST","headers":{":authority":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"37aa6941-3a28-4b40-85ed-9b6b4abd163f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"37aa6941-3a28-4b40-85ed-9b6b4abd163f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"]}} {"level":"debug","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"37aa6941-3a28-4b40-85ed-9b6b4abd163f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37aa6941-3a28-4b40-85ed-9b6b4abd163f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37aa6941-3a28-4b40-85ed-9b6b4abd163f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"37aa6941-3a28-4b40-85ed-9b6b4abd163f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-67755c/auth-test-model-67755c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"37aa6941-3a28-4b40-85ed-9b6b4abd163f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37aa6941-3a28-4b40-85ed-9b6b4abd163f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"37aa6941-3a28-4b40-85ed-9b6b4abd163f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37aa6941-3a28-4b40-85ed-9b6b4abd163f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"37aa6941-3a28-4b40-85ed-9b6b4abd163f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"236286be-9d08-4fc6-9e8f-068d2ba1868d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:56262","PortSpecifier":{"PortValue":56262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"236286be-9d08-4fc6-9e8f-068d2ba1868d","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"236286be-9d08-4fc6-9e8f-068d2ba1868d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:56262","PortSpecifier":{"PortValue":56262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370511,"nanos":514374580},"http":{"id":"236286be-9d08-4fc6-9e8f-068d2ba1868d","method":"POST","headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"236286be-9d08-4fc6-9e8f-068d2ba1868d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"236286be-9d08-4fc6-9e8f-068d2ba1868d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"]}} {"level":"debug","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"236286be-9d08-4fc6-9e8f-068d2ba1868d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5b59734645bdf4a63639568aaf185d1b8bf5b87c9c86ca92a5642ef756f5d317"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"236286be-9d08-4fc6-9e8f-068d2ba1868d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"236286be-9d08-4fc6-9e8f-068d2ba1868d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"236286be-9d08-4fc6-9e8f-068d2ba1868d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-37e178/auth-test-model-37e178\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"236286be-9d08-4fc6-9e8f-068d2ba1868d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"236286be-9d08-4fc6-9e8f-068d2ba1868d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"236286be-9d08-4fc6-9e8f-068d2ba1868d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"236286be-9d08-4fc6-9e8f-068d2ba1868d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"236286be-9d08-4fc6-9e8f-068d2ba1868d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6f30197-2d50-4c22-995a-4df994a171fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49916","PortSpecifier":{"PortValue":49916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f6f30197-2d50-4c22-995a-4df994a171fb","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6f30197-2d50-4c22-995a-4df994a171fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49916","PortSpecifier":{"PortValue":49916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370511,"nanos":549628200},"http":{"id":"f6f30197-2d50-4c22-995a-4df994a171fb","method":"POST","headers":{":authority":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f6f30197-2d50-4c22-995a-4df994a171fb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f6f30197-2d50-4c22-995a-4df994a171fb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"]}} {"level":"debug","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f6f30197-2d50-4c22-995a-4df994a171fb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6f30197-2d50-4c22-995a-4df994a171fb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6f30197-2d50-4c22-995a-4df994a171fb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6f30197-2d50-4c22-995a-4df994a171fb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-67755c/auth-test-model-67755c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f6f30197-2d50-4c22-995a-4df994a171fb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6f30197-2d50-4c22-995a-4df994a171fb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6f30197-2d50-4c22-995a-4df994a171fb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6f30197-2d50-4c22-995a-4df994a171fb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:41:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6f30197-2d50-4c22-995a-4df994a171fb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"535167a8-99bc-4160-bad1-c5d527d48311","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:40456","PortSpecifier":{"PortValue":40456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"535167a8-99bc-4160-bad1-c5d527d48311","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"535167a8-99bc-4160-bad1-c5d527d48311","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:40456","PortSpecifier":{"PortValue":40456}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370528,"nanos":756153080},"http":{"id":"535167a8-99bc-4160-bad1-c5d527d48311","method":"POST","headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"535167a8-99bc-4160-bad1-c5d527d48311","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"535167a8-99bc-4160-bad1-c5d527d48311","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"]}} {"level":"debug","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"535167a8-99bc-4160-bad1-c5d527d48311","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5b59734645bdf4a63639568aaf185d1b8bf5b87c9c86ca92a5642ef756f5d317"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"535167a8-99bc-4160-bad1-c5d527d48311","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"535167a8-99bc-4160-bad1-c5d527d48311","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"535167a8-99bc-4160-bad1-c5d527d48311","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-37e178/auth-test-model-37e178\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"535167a8-99bc-4160-bad1-c5d527d48311","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"535167a8-99bc-4160-bad1-c5d527d48311","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"535167a8-99bc-4160-bad1-c5d527d48311","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"535167a8-99bc-4160-bad1-c5d527d48311","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"535167a8-99bc-4160-bad1-c5d527d48311","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b9937e9-0827-4efd-8548-7f07b4a2c522","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60618","PortSpecifier":{"PortValue":60618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6b9937e9-0827-4efd-8548-7f07b4a2c522","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b9937e9-0827-4efd-8548-7f07b4a2c522","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60618","PortSpecifier":{"PortValue":60618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370528,"nanos":789079697},"http":{"id":"6b9937e9-0827-4efd-8548-7f07b4a2c522","method":"POST","headers":{":authority":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6b9937e9-0827-4efd-8548-7f07b4a2c522","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6b9937e9-0827-4efd-8548-7f07b4a2c522","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"]}} {"level":"debug","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6b9937e9-0827-4efd-8548-7f07b4a2c522","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b9937e9-0827-4efd-8548-7f07b4a2c522","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b9937e9-0827-4efd-8548-7f07b4a2c522","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b9937e9-0827-4efd-8548-7f07b4a2c522","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-67755c/auth-test-model-67755c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6b9937e9-0827-4efd-8548-7f07b4a2c522","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b9937e9-0827-4efd-8548-7f07b4a2c522","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b9937e9-0827-4efd-8548-7f07b4a2c522","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b9937e9-0827-4efd-8548-7f07b4a2c522","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b9937e9-0827-4efd-8548-7f07b4a2c522","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94c48732-2a13-47cf-a87e-503d54350b24","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60622","PortSpecifier":{"PortValue":60622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"94c48732-2a13-47cf-a87e-503d54350b24","method":"GET","path":"/maas-api/v1/api-keys/cb2e7f8b-85c9-4afc-a818-e3d2c68a5301","host":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94c48732-2a13-47cf-a87e-503d54350b24","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60622","PortSpecifier":{"PortValue":60622}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370528,"nanos":824619322},"http":{"id":"94c48732-2a13-47cf-a87e-503d54350b24","method":"GET","headers":{":authority":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/cb2e7f8b-85c9-4afc-a818-e3d2c68a5301",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"94c48732-2a13-47cf-a87e-503d54350b24","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"94c48732-2a13-47cf-a87e-503d54350b24","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"]}} {"level":"debug","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"94c48732-2a13-47cf-a87e-503d54350b24","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/cb2e7f8b-85c9-4afc-a818-e3d2c68a5301",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94c48732-2a13-47cf-a87e-503d54350b24","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94c48732-2a13-47cf-a87e-503d54350b24","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94c48732-2a13-47cf-a87e-503d54350b24","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-67755c/auth-test-model-67755c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"94c48732-2a13-47cf-a87e-503d54350b24","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94c48732-2a13-47cf-a87e-503d54350b24","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94c48732-2a13-47cf-a87e-503d54350b24","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94c48732-2a13-47cf-a87e-503d54350b24","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94c48732-2a13-47cf-a87e-503d54350b24","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e022885b-1a55-45d9-8527-4baa546c270e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:40470","PortSpecifier":{"PortValue":40470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e022885b-1a55-45d9-8527-4baa546c270e","method":"GET","path":"/maas-api/v1/api-keys/cb2e7f8b-85c9-4afc-a818-e3d2c68a5301","host":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e022885b-1a55-45d9-8527-4baa546c270e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:40470","PortSpecifier":{"PortValue":40470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370528,"nanos":856786484},"http":{"id":"e022885b-1a55-45d9-8527-4baa546c270e","method":"GET","headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/cb2e7f8b-85c9-4afc-a818-e3d2c68a5301",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e022885b-1a55-45d9-8527-4baa546c270e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e022885b-1a55-45d9-8527-4baa546c270e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"]}} {"level":"debug","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e022885b-1a55-45d9-8527-4baa546c270e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5b59734645bdf4a63639568aaf185d1b8bf5b87c9c86ca92a5642ef756f5d317"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/cb2e7f8b-85c9-4afc-a818-e3d2c68a5301",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e022885b-1a55-45d9-8527-4baa546c270e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e022885b-1a55-45d9-8527-4baa546c270e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e022885b-1a55-45d9-8527-4baa546c270e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-37e178/auth-test-model-37e178\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e022885b-1a55-45d9-8527-4baa546c270e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e022885b-1a55-45d9-8527-4baa546c270e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e022885b-1a55-45d9-8527-4baa546c270e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e022885b-1a55-45d9-8527-4baa546c270e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:42:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e022885b-1a55-45d9-8527-4baa546c270e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:42:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f46b5a2f-3165-4bce-87f0-2aeecb925828","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37714","PortSpecifier":{"PortValue":37714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f46b5a2f-3165-4bce-87f0-2aeecb925828","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:42:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f46b5a2f-3165-4bce-87f0-2aeecb925828","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37714","PortSpecifier":{"PortValue":37714}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370557,"nanos":62926474},"http":{"id":"f46b5a2f-3165-4bce-87f0-2aeecb925828","method":"POST","headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:42:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f46b5a2f-3165-4bce-87f0-2aeecb925828","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:42:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f46b5a2f-3165-4bce-87f0-2aeecb925828","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"]}} {"level":"debug","ts":"2026-07-06T20:42:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f46b5a2f-3165-4bce-87f0-2aeecb925828","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5b59734645bdf4a63639568aaf185d1b8bf5b87c9c86ca92a5642ef756f5d317"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:42:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f46b5a2f-3165-4bce-87f0-2aeecb925828","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:42:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f46b5a2f-3165-4bce-87f0-2aeecb925828","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:42:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f46b5a2f-3165-4bce-87f0-2aeecb925828","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-37e178/auth-test-model-37e178\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:42:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f46b5a2f-3165-4bce-87f0-2aeecb925828","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:42:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f46b5a2f-3165-4bce-87f0-2aeecb925828","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:42:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f46b5a2f-3165-4bce-87f0-2aeecb925828","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T20:42:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f46b5a2f-3165-4bce-87f0-2aeecb925828","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:42:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f46b5a2f-3165-4bce-87f0-2aeecb925828","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e9ba108426185da1e0d8cb977e13a0fa2341914d92a996e0191214042067113"} {"level":"info","ts":"2026-07-06T20:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93c70fa23b3b34639b38d96ab153668ec8c5316f31e9649861b1c4c2e13437da"} {"level":"info","ts":"2026-07-06T20:42:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60e82100be4361b7b0a33f75685e09ac280b715d53786b7815cf5e558335de6c"} {"level":"info","ts":"2026-07-06T20:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd4b203d4235cfad6ea93c676833d86d31c5adc97905c89b451bf96130287fb4"} {"level":"info","ts":"2026-07-06T20:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d758636b9d6e23af695d9f5e385686505825ff73a76b55d48de9a88c81890943"} {"level":"info","ts":"2026-07-06T20:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0081da3203e8abdff736a31901f3c54cf19a573c40003096382dd0ccb2257342"} {"level":"info","ts":"2026-07-06T20:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9d48aa16fc2a506a165555f576a634f15be2fdd31a3cda647af00b8d6567244"} {"level":"info","ts":"2026-07-06T20:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea0f600c63d9134657515ffd3acc4fb14d69718b1dd26ae3f0882420254a7ad6"} {"level":"info","ts":"2026-07-06T20:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9214ea9edf559a93611f9d8f8fe8b41cf2e2462e3e1d0883edc1d95511047d18"} {"level":"info","ts":"2026-07-06T20:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f9832528cfa931ef6c4a4a052bd7ce29d699040d02fe591a85421a2b22e8f1aa"} {"level":"info","ts":"2026-07-06T20:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d81e6f132e8a41f99288adcdd25b2bed933e2e960e5d0e2ab5dc76cfb5dcaf75"} {"level":"info","ts":"2026-07-06T20:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e116bda90a4205aff335383ce8d2b8f337088b9a9368287e748895186d5e701"} {"level":"info","ts":"2026-07-06T20:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21c823ebeba8b5518b566c1e7f838ac17f9002103e413aee1d373a313430931b"} {"level":"info","ts":"2026-07-06T20:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f6d4c4ce868b9c509d1706258f831a0148645ac98f847a741c775a776a26c407"} {"level":"info","ts":"2026-07-06T20:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3f9330b25ee8ac864d1d9b0c3622b68db509383df3d76b1ca0b0e3650f3732a"} {"level":"info","ts":"2026-07-06T20:42:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c5e919383b9fb38c2ca7588aefd0dbb0278dff7ca2a63c7414a287e5d8cfa89"} {"level":"debug","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:42:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:42:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1"} {"level":"debug","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1"} {"level":"debug","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:42:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:42:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:42:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:42:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1"} {"level":"debug","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1"} {"level":"debug","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:42:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:42:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:42:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:42:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1"} {"level":"info","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1"} {"level":"debug","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:42:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:42:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:42:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:42:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1"} {"level":"info","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1"} {"level":"debug","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:42:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:42:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:42:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:42:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1"} {"level":"info","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1"} {"level":"debug","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:42:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:42:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54c244ada4135261093155c9f3f0522aa0e89218f40fbcc08bbb39d5a15c2a14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:42:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:42:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54c244ada4135261093155c9f3f0522aa0e89218f40fbcc08bbb39d5a15c2a14"} {"level":"info","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54c244ada4135261093155c9f3f0522aa0e89218f40fbcc08bbb39d5a15c2a14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:42:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:42:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54c244ada4135261093155c9f3f0522aa0e89218f40fbcc08bbb39d5a15c2a14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:42:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:42:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54c244ada4135261093155c9f3f0522aa0e89218f40fbcc08bbb39d5a15c2a14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1"} {"level":"info","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54c244ada4135261093155c9f3f0522aa0e89218f40fbcc08bbb39d5a15c2a14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:42:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:42:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54c244ada4135261093155c9f3f0522aa0e89218f40fbcc08bbb39d5a15c2a14"} {"level":"info","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54c244ada4135261093155c9f3f0522aa0e89218f40fbcc08bbb39d5a15c2a14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:42:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:42:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1"} {"level":"info","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:42:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:42:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54c244ada4135261093155c9f3f0522aa0e89218f40fbcc08bbb39d5a15c2a14"} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1"} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1"} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"913374d1053cd0a7cfdc4679a54509f2a22ded266091a8ff0edc9b65c6a35205","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1"} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"913374d1053cd0a7cfdc4679a54509f2a22ded266091a8ff0edc9b65c6a35205","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"913374d1053cd0a7cfdc4679a54509f2a22ded266091a8ff0edc9b65c6a35205","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/913374d1053cd0a7cfdc4679a54509f2a22ded266091a8ff0edc9b65c6a35205"} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"913374d1053cd0a7cfdc4679a54509f2a22ded266091a8ff0edc9b65c6a35205","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"913374d1053cd0a7cfdc4679a54509f2a22ded266091a8ff0edc9b65c6a35205","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/913374d1053cd0a7cfdc4679a54509f2a22ded266091a8ff0edc9b65c6a35205"} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"913374d1053cd0a7cfdc4679a54509f2a22ded266091a8ff0edc9b65c6a35205","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["913374d1053cd0a7cfdc4679a54509f2a22ded266091a8ff0edc9b65c6a35205"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"913374d1053cd0a7cfdc4679a54509f2a22ded266091a8ff0edc9b65c6a35205","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"913374d1053cd0a7cfdc4679a54509f2a22ded266091a8ff0edc9b65c6a35205","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1"} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/913374d1053cd0a7cfdc4679a54509f2a22ded266091a8ff0edc9b65c6a35205"} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ed71567f2db788e0146ffebfa15c47e231262f0b303863fbe3d47580060b7ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ed71567f2db788e0146ffebfa15c47e231262f0b303863fbe3d47580060b7ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ed71567f2db788e0146ffebfa15c47e231262f0b303863fbe3d47580060b7ee"} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0ed71567f2db788e0146ffebfa15c47e231262f0b303863fbe3d47580060b7ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0ed71567f2db788e0146ffebfa15c47e231262f0b303863fbe3d47580060b7ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f"} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0ed71567f2db788e0146ffebfa15c47e231262f0b303863fbe3d47580060b7ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ed71567f2db788e0146ffebfa15c47e231262f0b303863fbe3d47580060b7ee"} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ed71567f2db788e0146ffebfa15c47e231262f0b303863fbe3d47580060b7ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f"} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5431976c600811618ead93f74941f63ac3e6cb64982a1dbb11842d9c52b193ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ed71567f2db788e0146ffebfa15c47e231262f0b303863fbe3d47580060b7ee"} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5431976c600811618ead93f74941f63ac3e6cb64982a1dbb11842d9c52b193ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5431976c600811618ead93f74941f63ac3e6cb64982a1dbb11842d9c52b193ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5431976c600811618ead93f74941f63ac3e6cb64982a1dbb11842d9c52b193ad"} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5431976c600811618ead93f74941f63ac3e6cb64982a1dbb11842d9c52b193ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f"} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5431976c600811618ead93f74941f63ac3e6cb64982a1dbb11842d9c52b193ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5431976c600811618ead93f74941f63ac3e6cb64982a1dbb11842d9c52b193ad"} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5431976c600811618ead93f74941f63ac3e6cb64982a1dbb11842d9c52b193ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5431976c600811618ead93f74941f63ac3e6cb64982a1dbb11842d9c52b193ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5431976c600811618ead93f74941f63ac3e6cb64982a1dbb11842d9c52b193ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816"} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5431976c600811618ead93f74941f63ac3e6cb64982a1dbb11842d9c52b193ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc23032847769508efbea5e6ab3fd29deb87324bf5fe83dec6dc60cbe9923506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f"} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc23032847769508efbea5e6ab3fd29deb87324bf5fe83dec6dc60cbe9923506","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5431976c600811618ead93f74941f63ac3e6cb64982a1dbb11842d9c52b193ad"} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816"} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc23032847769508efbea5e6ab3fd29deb87324bf5fe83dec6dc60cbe9923506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc23032847769508efbea5e6ab3fd29deb87324bf5fe83dec6dc60cbe9923506"} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc23032847769508efbea5e6ab3fd29deb87324bf5fe83dec6dc60cbe9923506","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f"} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc23032847769508efbea5e6ab3fd29deb87324bf5fe83dec6dc60cbe9923506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc23032847769508efbea5e6ab3fd29deb87324bf5fe83dec6dc60cbe9923506"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816"} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc23032847769508efbea5e6ab3fd29deb87324bf5fe83dec6dc60cbe9923506","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc23032847769508efbea5e6ab3fd29deb87324bf5fe83dec6dc60cbe9923506"} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f"} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc23032847769508efbea5e6ab3fd29deb87324bf5fe83dec6dc60cbe9923506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc23032847769508efbea5e6ab3fd29deb87324bf5fe83dec6dc60cbe9923506"} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc23032847769508efbea5e6ab3fd29deb87324bf5fe83dec6dc60cbe9923506","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f"} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816"} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc23032847769508efbea5e6ab3fd29deb87324bf5fe83dec6dc60cbe9923506","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc23032847769508efbea5e6ab3fd29deb87324bf5fe83dec6dc60cbe9923506"} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f"} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc23032847769508efbea5e6ab3fd29deb87324bf5fe83dec6dc60cbe9923506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:42:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc23032847769508efbea5e6ab3fd29deb87324bf5fe83dec6dc60cbe9923506"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:42:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816"} {"level":"info","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc23032847769508efbea5e6ab3fd29deb87324bf5fe83dec6dc60cbe9923506","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f"} {"level":"info","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816"} {"level":"info","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc23032847769508efbea5e6ab3fd29deb87324bf5fe83dec6dc60cbe9923506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc23032847769508efbea5e6ab3fd29deb87324bf5fe83dec6dc60cbe9923506"} {"level":"info","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc23032847769508efbea5e6ab3fd29deb87324bf5fe83dec6dc60cbe9923506","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f"} {"level":"info","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc23032847769508efbea5e6ab3fd29deb87324bf5fe83dec6dc60cbe9923506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc23032847769508efbea5e6ab3fd29deb87324bf5fe83dec6dc60cbe9923506"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816"} {"level":"info","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc23032847769508efbea5e6ab3fd29deb87324bf5fe83dec6dc60cbe9923506","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc23032847769508efbea5e6ab3fd29deb87324bf5fe83dec6dc60cbe9923506"} {"level":"info","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816"} {"level":"info","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc23032847769508efbea5e6ab3fd29deb87324bf5fe83dec6dc60cbe9923506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc23032847769508efbea5e6ab3fd29deb87324bf5fe83dec6dc60cbe9923506"} {"level":"info","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc23032847769508efbea5e6ab3fd29deb87324bf5fe83dec6dc60cbe9923506","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f"} {"level":"info","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc23032847769508efbea5e6ab3fd29deb87324bf5fe83dec6dc60cbe9923506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc23032847769508efbea5e6ab3fd29deb87324bf5fe83dec6dc60cbe9923506"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816"} {"level":"info","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc23032847769508efbea5e6ab3fd29deb87324bf5fe83dec6dc60cbe9923506","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc23032847769508efbea5e6ab3fd29deb87324bf5fe83dec6dc60cbe9923506"} {"level":"info","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f"} {"level":"info","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc23032847769508efbea5e6ab3fd29deb87324bf5fe83dec6dc60cbe9923506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc23032847769508efbea5e6ab3fd29deb87324bf5fe83dec6dc60cbe9923506","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc23032847769508efbea5e6ab3fd29deb87324bf5fe83dec6dc60cbe9923506","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc23032847769508efbea5e6ab3fd29deb87324bf5fe83dec6dc60cbe9923506"} {"level":"debug","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc23032847769508efbea5e6ab3fd29deb87324bf5fe83dec6dc60cbe9923506","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc23032847769508efbea5e6ab3fd29deb87324bf5fe83dec6dc60cbe9923506"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc23032847769508efbea5e6ab3fd29deb87324bf5fe83dec6dc60cbe9923506","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc23032847769508efbea5e6ab3fd29deb87324bf5fe83dec6dc60cbe9923506","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f"} {"level":"info","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816"} {"level":"info","ts":"2026-07-06T20:43:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc23032847769508efbea5e6ab3fd29deb87324bf5fe83dec6dc60cbe9923506"} {"level":"debug","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08a9fa285ec2bafe158a91d994960beebb20a11ebeafe4ed9c8fdab49ce243a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08a9fa285ec2bafe158a91d994960beebb20a11ebeafe4ed9c8fdab49ce243a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08a9fa285ec2bafe158a91d994960beebb20a11ebeafe4ed9c8fdab49ce243a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08a9fa285ec2bafe158a91d994960beebb20a11ebeafe4ed9c8fdab49ce243a6"} {"level":"info","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08a9fa285ec2bafe158a91d994960beebb20a11ebeafe4ed9c8fdab49ce243a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08a9fa285ec2bafe158a91d994960beebb20a11ebeafe4ed9c8fdab49ce243a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"08a9fa285ec2bafe158a91d994960beebb20a11ebeafe4ed9c8fdab49ce243a6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"08a9fa285ec2bafe158a91d994960beebb20a11ebeafe4ed9c8fdab49ce243a6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08a9fa285ec2bafe158a91d994960beebb20a11ebeafe4ed9c8fdab49ce243a6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08a9fa285ec2bafe158a91d994960beebb20a11ebeafe4ed9c8fdab49ce243a6"} {"level":"debug","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08a9fa285ec2bafe158a91d994960beebb20a11ebeafe4ed9c8fdab49ce243a6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08a9fa285ec2bafe158a91d994960beebb20a11ebeafe4ed9c8fdab49ce243a6"} {"level":"debug","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79bd2b8eb85591735697daaccf5f571c73180a93465943597f8119cd98943fff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79bd2b8eb85591735697daaccf5f571c73180a93465943597f8119cd98943fff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79bd2b8eb85591735697daaccf5f571c73180a93465943597f8119cd98943fff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79bd2b8eb85591735697daaccf5f571c73180a93465943597f8119cd98943fff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79bd2b8eb85591735697daaccf5f571c73180a93465943597f8119cd98943fff"} {"level":"debug","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79bd2b8eb85591735697daaccf5f571c73180a93465943597f8119cd98943fff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08a9fa285ec2bafe158a91d994960beebb20a11ebeafe4ed9c8fdab49ce243a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08a9fa285ec2bafe158a91d994960beebb20a11ebeafe4ed9c8fdab49ce243a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08a9fa285ec2bafe158a91d994960beebb20a11ebeafe4ed9c8fdab49ce243a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08a9fa285ec2bafe158a91d994960beebb20a11ebeafe4ed9c8fdab49ce243a6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79bd2b8eb85591735697daaccf5f571c73180a93465943597f8119cd98943fff"} {"level":"debug","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79bd2b8eb85591735697daaccf5f571c73180a93465943597f8119cd98943fff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79bd2b8eb85591735697daaccf5f571c73180a93465943597f8119cd98943fff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79bd2b8eb85591735697daaccf5f571c73180a93465943597f8119cd98943fff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79bd2b8eb85591735697daaccf5f571c73180a93465943597f8119cd98943fff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08a9fa285ec2bafe158a91d994960beebb20a11ebeafe4ed9c8fdab49ce243a6"} {"level":"debug","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c"} {"level":"debug","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79bd2b8eb85591735697daaccf5f571c73180a93465943597f8119cd98943fff"} {"level":"info","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24ecd8e1bda13c53e8e8da10825f6d459033a6341fa8a606c609e406b3b94224","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c"} {"level":"info","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24ecd8e1bda13c53e8e8da10825f6d459033a6341fa8a606c609e406b3b94224","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24ecd8e1bda13c53e8e8da10825f6d459033a6341fa8a606c609e406b3b94224","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24ecd8e1bda13c53e8e8da10825f6d459033a6341fa8a606c609e406b3b94224"} {"level":"info","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24ecd8e1bda13c53e8e8da10825f6d459033a6341fa8a606c609e406b3b94224","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24ecd8e1bda13c53e8e8da10825f6d459033a6341fa8a606c609e406b3b94224","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24ecd8e1bda13c53e8e8da10825f6d459033a6341fa8a606c609e406b3b94224"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"24ecd8e1bda13c53e8e8da10825f6d459033a6341fa8a606c609e406b3b94224","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"24ecd8e1bda13c53e8e8da10825f6d459033a6341fa8a606c609e406b3b94224\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24ecd8e1bda13c53e8e8da10825f6d459033a6341fa8a606c609e406b3b94224","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24ecd8e1bda13c53e8e8da10825f6d459033a6341fa8a606c609e406b3b94224"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c"} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24ecd8e1bda13c53e8e8da10825f6d459033a6341fa8a606c609e406b3b94224","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24ecd8e1bda13c53e8e8da10825f6d459033a6341fa8a606c609e406b3b94224","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24ecd8e1bda13c53e8e8da10825f6d459033a6341fa8a606c609e406b3b94224"} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24ecd8e1bda13c53e8e8da10825f6d459033a6341fa8a606c609e406b3b94224","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24ecd8e1bda13c53e8e8da10825f6d459033a6341fa8a606c609e406b3b94224","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"24ecd8e1bda13c53e8e8da10825f6d459033a6341fa8a606c609e406b3b94224","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"24ecd8e1bda13c53e8e8da10825f6d459033a6341fa8a606c609e406b3b94224\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24ecd8e1bda13c53e8e8da10825f6d459033a6341fa8a606c609e406b3b94224","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24ecd8e1bda13c53e8e8da10825f6d459033a6341fa8a606c609e406b3b94224"} {"level":"debug","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24ecd8e1bda13c53e8e8da10825f6d459033a6341fa8a606c609e406b3b94224","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0836069eb9b1029e5f7a9c5cd1c13159a92ec57aa7932562f1d4264a10b4dcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24ecd8e1bda13c53e8e8da10825f6d459033a6341fa8a606c609e406b3b94224"} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0836069eb9b1029e5f7a9c5cd1c13159a92ec57aa7932562f1d4264a10b4dcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0836069eb9b1029e5f7a9c5cd1c13159a92ec57aa7932562f1d4264a10b4dcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0836069eb9b1029e5f7a9c5cd1c13159a92ec57aa7932562f1d4264a10b4dcc"} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0836069eb9b1029e5f7a9c5cd1c13159a92ec57aa7932562f1d4264a10b4dcc"} {"level":"error","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b0836069eb9b1029e5f7a9c5cd1c13159a92ec57aa7932562f1d4264a10b4dcc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b0836069eb9b1029e5f7a9c5cd1c13159a92ec57aa7932562f1d4264a10b4dcc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24ecd8e1bda13c53e8e8da10825f6d459033a6341fa8a606c609e406b3b94224","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24ecd8e1bda13c53e8e8da10825f6d459033a6341fa8a606c609e406b3b94224"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44968d4459e27057b80fc21a4d2ab1efd08464f9514d1723a2411403811b46df"} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745"} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24ecd8e1bda13c53e8e8da10825f6d459033a6341fa8a606c609e406b3b94224","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44968d4459e27057b80fc21a4d2ab1efd08464f9514d1723a2411403811b46df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44968d4459e27057b80fc21a4d2ab1efd08464f9514d1723a2411403811b46df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24ecd8e1bda13c53e8e8da10825f6d459033a6341fa8a606c609e406b3b94224"} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44968d4459e27057b80fc21a4d2ab1efd08464f9514d1723a2411403811b46df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0836069eb9b1029e5f7a9c5cd1c13159a92ec57aa7932562f1d4264a10b4dcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0836069eb9b1029e5f7a9c5cd1c13159a92ec57aa7932562f1d4264a10b4dcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44968d4459e27057b80fc21a4d2ab1efd08464f9514d1723a2411403811b46df"} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0836069eb9b1029e5f7a9c5cd1c13159a92ec57aa7932562f1d4264a10b4dcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0836069eb9b1029e5f7a9c5cd1c13159a92ec57aa7932562f1d4264a10b4dcc"} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24ecd8e1bda13c53e8e8da10825f6d459033a6341fa8a606c609e406b3b94224","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44968d4459e27057b80fc21a4d2ab1efd08464f9514d1723a2411403811b46df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0836069eb9b1029e5f7a9c5cd1c13159a92ec57aa7932562f1d4264a10b4dcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c"} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745"} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c"} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745"} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c"} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745"} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c"} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745"} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745"} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c"} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745"} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c"} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c"} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745"} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c"} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745"} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745"} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c"} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745"} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c"} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745"} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c"} {"level":"debug","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c"} {"level":"debug","ts":"2026-07-06T20:43:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c"} {"level":"debug","ts":"2026-07-06T20:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c"} {"level":"debug","ts":"2026-07-06T20:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:43:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c"} {"level":"debug","ts":"2026-07-06T20:43:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dc149239f705d21609e0d042b461383983e8fdb599cd9003df5ff1c0ef89e32","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:43:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dc149239f705d21609e0d042b461383983e8fdb599cd9003df5ff1c0ef89e32"} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745"} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745"} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745"} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51fb72a4bb6028e99b2e3bbb5006cbf6602b2f7b6d7a872b5b1070ec5bc29c96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51fb72a4bb6028e99b2e3bbb5006cbf6602b2f7b6d7a872b5b1070ec5bc29c96"} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51fb72a4bb6028e99b2e3bbb5006cbf6602b2f7b6d7a872b5b1070ec5bc29c96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51fb72a4bb6028e99b2e3bbb5006cbf6602b2f7b6d7a872b5b1070ec5bc29c96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"51fb72a4bb6028e99b2e3bbb5006cbf6602b2f7b6d7a872b5b1070ec5bc29c96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["51fb72a4bb6028e99b2e3bbb5006cbf6602b2f7b6d7a872b5b1070ec5bc29c96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745"} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51fb72a4bb6028e99b2e3bbb5006cbf6602b2f7b6d7a872b5b1070ec5bc29c96"} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"51fb72a4bb6028e99b2e3bbb5006cbf6602b2f7b6d7a872b5b1070ec5bc29c96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51fb72a4bb6028e99b2e3bbb5006cbf6602b2f7b6d7a872b5b1070ec5bc29c96"} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51fb72a4bb6028e99b2e3bbb5006cbf6602b2f7b6d7a872b5b1070ec5bc29c96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745"} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816"} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745"} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816"} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816"} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc23032847769508efbea5e6ab3fd29deb87324bf5fe83dec6dc60cbe9923506"} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc23032847769508efbea5e6ab3fd29deb87324bf5fe83dec6dc60cbe9923506","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745"} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816"} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745"} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745"} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816"} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745"} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c"} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745"} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c"} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c"} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c"} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5431976c600811618ead93f74941f63ac3e6cb64982a1dbb11842d9c52b193ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c"} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44968d4459e27057b80fc21a4d2ab1efd08464f9514d1723a2411403811b46df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5431976c600811618ead93f74941f63ac3e6cb64982a1dbb11842d9c52b193ad"} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44968d4459e27057b80fc21a4d2ab1efd08464f9514d1723a2411403811b46df"} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c"} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:43:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c"} {"level":"debug","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b59734645bdf4a63639568aaf185d1b8bf5b87c9c86ca92a5642ef756f5d317","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b59734645bdf4a63639568aaf185d1b8bf5b87c9c86ca92a5642ef756f5d317"} {"level":"info","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f"} {"level":"info","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b59734645bdf4a63639568aaf185d1b8bf5b87c9c86ca92a5642ef756f5d317","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b59734645bdf4a63639568aaf185d1b8bf5b87c9c86ca92a5642ef756f5d317","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b59734645bdf4a63639568aaf185d1b8bf5b87c9c86ca92a5642ef756f5d317"} {"level":"debug","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5b59734645bdf4a63639568aaf185d1b8bf5b87c9c86ca92a5642ef756f5d317","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5b59734645bdf4a63639568aaf185d1b8bf5b87c9c86ca92a5642ef756f5d317"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b59734645bdf4a63639568aaf185d1b8bf5b87c9c86ca92a5642ef756f5d317"} {"level":"info","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5b59734645bdf4a63639568aaf185d1b8bf5b87c9c86ca92a5642ef756f5d317","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b59734645bdf4a63639568aaf185d1b8bf5b87c9c86ca92a5642ef756f5d317","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0836069eb9b1029e5f7a9c5cd1c13159a92ec57aa7932562f1d4264a10b4dcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0836069eb9b1029e5f7a9c5cd1c13159a92ec57aa7932562f1d4264a10b4dcc"} {"level":"info","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0836069eb9b1029e5f7a9c5cd1c13159a92ec57aa7932562f1d4264a10b4dcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0836069eb9b1029e5f7a9c5cd1c13159a92ec57aa7932562f1d4264a10b4dcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0836069eb9b1029e5f7a9c5cd1c13159a92ec57aa7932562f1d4264a10b4dcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0836069eb9b1029e5f7a9c5cd1c13159a92ec57aa7932562f1d4264a10b4dcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0ed71567f2db788e0146ffebfa15c47e231262f0b303863fbe3d47580060b7ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0836069eb9b1029e5f7a9c5cd1c13159a92ec57aa7932562f1d4264a10b4dcc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0836069eb9b1029e5f7a9c5cd1c13159a92ec57aa7932562f1d4264a10b4dcc"} {"level":"debug","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0836069eb9b1029e5f7a9c5cd1c13159a92ec57aa7932562f1d4264a10b4dcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0836069eb9b1029e5f7a9c5cd1c13159a92ec57aa7932562f1d4264a10b4dcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0ed71567f2db788e0146ffebfa15c47e231262f0b303863fbe3d47580060b7ee"} {"level":"info","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0836069eb9b1029e5f7a9c5cd1c13159a92ec57aa7932562f1d4264a10b4dcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0836069eb9b1029e5f7a9c5cd1c13159a92ec57aa7932562f1d4264a10b4dcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0836069eb9b1029e5f7a9c5cd1c13159a92ec57aa7932562f1d4264a10b4dcc"} {"level":"info","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0836069eb9b1029e5f7a9c5cd1c13159a92ec57aa7932562f1d4264a10b4dcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54c244ada4135261093155c9f3f0522aa0e89218f40fbcc08bbb39d5a15c2a14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54c244ada4135261093155c9f3f0522aa0e89218f40fbcc08bbb39d5a15c2a14"} {"level":"info","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54c244ada4135261093155c9f3f0522aa0e89218f40fbcc08bbb39d5a15c2a14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1"} {"level":"info","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0836069eb9b1029e5f7a9c5cd1c13159a92ec57aa7932562f1d4264a10b4dcc"} {"level":"info","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b0836069eb9b1029e5f7a9c5cd1c13159a92ec57aa7932562f1d4264a10b4dcc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b0836069eb9b1029e5f7a9c5cd1c13159a92ec57aa7932562f1d4264a10b4dcc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54c244ada4135261093155c9f3f0522aa0e89218f40fbcc08bbb39d5a15c2a14"} {"level":"info","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1"} {"level":"info","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b0836069eb9b1029e5f7a9c5cd1c13159a92ec57aa7932562f1d4264a10b4dcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54c244ada4135261093155c9f3f0522aa0e89218f40fbcc08bbb39d5a15c2a14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54c244ada4135261093155c9f3f0522aa0e89218f40fbcc08bbb39d5a15c2a14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/913374d1053cd0a7cfdc4679a54509f2a22ded266091a8ff0edc9b65c6a35205"} {"level":"info","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b0836069eb9b1029e5f7a9c5cd1c13159a92ec57aa7932562f1d4264a10b4dcc"} {"level":"info","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54c244ada4135261093155c9f3f0522aa0e89218f40fbcc08bbb39d5a15c2a14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54c244ada4135261093155c9f3f0522aa0e89218f40fbcc08bbb39d5a15c2a14"} {"level":"info","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08a9fa285ec2bafe158a91d994960beebb20a11ebeafe4ed9c8fdab49ce243a6"} {"level":"info","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"913374d1053cd0a7cfdc4679a54509f2a22ded266091a8ff0edc9b65c6a35205","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b0836069eb9b1029e5f7a9c5cd1c13159a92ec57aa7932562f1d4264a10b4dcc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54c244ada4135261093155c9f3f0522aa0e89218f40fbcc08bbb39d5a15c2a14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08a9fa285ec2bafe158a91d994960beebb20a11ebeafe4ed9c8fdab49ce243a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24ecd8e1bda13c53e8e8da10825f6d459033a6341fa8a606c609e406b3b94224","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24ecd8e1bda13c53e8e8da10825f6d459033a6341fa8a606c609e406b3b94224"} {"level":"info","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24ecd8e1bda13c53e8e8da10825f6d459033a6341fa8a606c609e406b3b94224","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:43:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:43:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1"} {"level":"info","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24ecd8e1bda13c53e8e8da10825f6d459033a6341fa8a606c609e406b3b94224"} {"level":"info","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24ecd8e1bda13c53e8e8da10825f6d459033a6341fa8a606c609e406b3b94224","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24ecd8e1bda13c53e8e8da10825f6d459033a6341fa8a606c609e406b3b94224"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79bd2b8eb85591735697daaccf5f571c73180a93465943597f8119cd98943fff"} {"level":"info","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24ecd8e1bda13c53e8e8da10825f6d459033a6341fa8a606c609e406b3b94224","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79bd2b8eb85591735697daaccf5f571c73180a93465943597f8119cd98943fff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24ecd8e1bda13c53e8e8da10825f6d459033a6341fa8a606c609e406b3b94224","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1"} {"level":"debug","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:43:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:43:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24ecd8e1bda13c53e8e8da10825f6d459033a6341fa8a606c609e406b3b94224"} {"level":"info","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:43:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1"} {"level":"info","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"005d4831-d53b-44fd-af5a-7a97246f822b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33156","PortSpecifier":{"PortValue":33156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"005d4831-d53b-44fd-af5a-7a97246f822b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"005d4831-d53b-44fd-af5a-7a97246f822b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33156","PortSpecifier":{"PortValue":33156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370635,"nanos":721780775},"http":{"id":"005d4831-d53b-44fd-af5a-7a97246f822b","method":"POST","headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"005d4831-d53b-44fd-af5a-7a97246f822b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"005d4831-d53b-44fd-af5a-7a97246f822b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"]}} {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"005d4831-d53b-44fd-af5a-7a97246f822b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5b59734645bdf4a63639568aaf185d1b8bf5b87c9c86ca92a5642ef756f5d317"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"005d4831-d53b-44fd-af5a-7a97246f822b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"005d4831-d53b-44fd-af5a-7a97246f822b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"005d4831-d53b-44fd-af5a-7a97246f822b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-37e178/sub-test-model-37e178\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"005d4831-d53b-44fd-af5a-7a97246f822b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"005d4831-d53b-44fd-af5a-7a97246f822b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"005d4831-d53b-44fd-af5a-7a97246f822b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"005d4831-d53b-44fd-af5a-7a97246f822b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"005d4831-d53b-44fd-af5a-7a97246f822b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3cd7f92-62a6-41e9-8d33-eabf959b0d1d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37078","PortSpecifier":{"PortValue":37078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d3cd7f92-62a6-41e9-8d33-eabf959b0d1d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3cd7f92-62a6-41e9-8d33-eabf959b0d1d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37078","PortSpecifier":{"PortValue":37078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370635,"nanos":767153169},"http":{"id":"d3cd7f92-62a6-41e9-8d33-eabf959b0d1d","method":"POST","headers":{":authority":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d3cd7f92-62a6-41e9-8d33-eabf959b0d1d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d3cd7f92-62a6-41e9-8d33-eabf959b0d1d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"]}} {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d3cd7f92-62a6-41e9-8d33-eabf959b0d1d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3cd7f92-62a6-41e9-8d33-eabf959b0d1d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3cd7f92-62a6-41e9-8d33-eabf959b0d1d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3cd7f92-62a6-41e9-8d33-eabf959b0d1d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-67755c/sub-test-model-67755c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d3cd7f92-62a6-41e9-8d33-eabf959b0d1d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3cd7f92-62a6-41e9-8d33-eabf959b0d1d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3cd7f92-62a6-41e9-8d33-eabf959b0d1d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3cd7f92-62a6-41e9-8d33-eabf959b0d1d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3cd7f92-62a6-41e9-8d33-eabf959b0d1d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b198565a-fb43-4a41-b473-7871fbba58b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33162","PortSpecifier":{"PortValue":33162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b198565a-fb43-4a41-b473-7871fbba58b5","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b198565a-fb43-4a41-b473-7871fbba58b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33162","PortSpecifier":{"PortValue":33162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370635,"nanos":807707396},"http":{"id":"b198565a-fb43-4a41-b473-7871fbba58b5","method":"GET","headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b198565a-fb43-4a41-b473-7871fbba58b5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-DjRJYY2VNjBoVGY2_kAc1pilwPg12Dv95Lsm5Fa3qDjKHYlQONLF4KEFKgg5"} {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b198565a-fb43-4a41-b473-7871fbba58b5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-DjRJYY2VNjBoVGY2_kAc1pilwPg12Dv95Lsm5Fa3qDjKHYlQONLF4KEFKgg5\"}"} {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b198565a-fb43-4a41-b473-7871fbba58b5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e2a02c45-e537-4924-ae0e-8c588bb03f17","keyName":"e2e-sub-iso-c2ffe2","subscription":"e2e-a-only-b268e3","tenant":"e2e-shared-a-37e178","userId":"e2a02c45-e537-4924-ae0e-8c588bb03f17","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b198565a-fb43-4a41-b473-7871fbba58b5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b198565a-fb43-4a41-b473-7871fbba58b5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b198565a-fb43-4a41-b473-7871fbba58b5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b198565a-fb43-4a41-b473-7871fbba58b5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-37e178/sub-test-model-37e178\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b198565a-fb43-4a41-b473-7871fbba58b5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b198565a-fb43-4a41-b473-7871fbba58b5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b198565a-fb43-4a41-b473-7871fbba58b5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b198565a-fb43-4a41-b473-7871fbba58b5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-b268e3"} {"level":"info","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b198565a-fb43-4a41-b473-7871fbba58b5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b198565a-fb43-4a41-b473-7871fbba58b5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99a049c9-3e95-4e60-a6ad-5f605126ca57","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37086","PortSpecifier":{"PortValue":37086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"99a049c9-3e95-4e60-a6ad-5f605126ca57","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99a049c9-3e95-4e60-a6ad-5f605126ca57","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:37086","PortSpecifier":{"PortValue":37086}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370635,"nanos":851381736},"http":{"id":"99a049c9-3e95-4e60-a6ad-5f605126ca57","method":"GET","headers":{":authority":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"99a049c9-3e95-4e60-a6ad-5f605126ca57","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XhOBxsOBB0HTpjIj_RlcyMlsem4hOvu0ARlSLdLlKqmdsTSlKYAEb41x1BOh"} {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"99a049c9-3e95-4e60-a6ad-5f605126ca57","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-67755c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XhOBxsOBB0HTpjIj_RlcyMlsem4hOvu0ARlSLdLlKqmdsTSlKYAEb41x1BOh\"}"} {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"99a049c9-3e95-4e60-a6ad-5f605126ca57","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-67755c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a24a23c3-edb5-46f4-9b33-8acfbfa59717","keyName":"e2e-sub-iso-5eb9b4","subscription":"e2e-b-only-b268e3","tenant":"e2e-shared-b-67755c","userId":"a24a23c3-edb5-46f4-9b33-8acfbfa59717","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"99a049c9-3e95-4e60-a6ad-5f605126ca57","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99a049c9-3e95-4e60-a6ad-5f605126ca57","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99a049c9-3e95-4e60-a6ad-5f605126ca57","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99a049c9-3e95-4e60-a6ad-5f605126ca57","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-67755c/sub-test-model-67755c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99a049c9-3e95-4e60-a6ad-5f605126ca57","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99a049c9-3e95-4e60-a6ad-5f605126ca57","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"99a049c9-3e95-4e60-a6ad-5f605126ca57","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99a049c9-3e95-4e60-a6ad-5f605126ca57","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-b268e3"} {"level":"info","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99a049c9-3e95-4e60-a6ad-5f605126ca57","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:43:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99a049c9-3e95-4e60-a6ad-5f605126ca57","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30ddf566-19e7-4db6-b039-3039d9c531fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:56038","PortSpecifier":{"PortValue":56038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"30ddf566-19e7-4db6-b039-3039d9c531fb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30ddf566-19e7-4db6-b039-3039d9c531fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:56038","PortSpecifier":{"PortValue":56038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370655,"nanos":783553362},"http":{"id":"30ddf566-19e7-4db6-b039-3039d9c531fb","method":"POST","headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"30ddf566-19e7-4db6-b039-3039d9c531fb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"30ddf566-19e7-4db6-b039-3039d9c531fb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"]}} {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"30ddf566-19e7-4db6-b039-3039d9c531fb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5b59734645bdf4a63639568aaf185d1b8bf5b87c9c86ca92a5642ef756f5d317"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30ddf566-19e7-4db6-b039-3039d9c531fb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30ddf566-19e7-4db6-b039-3039d9c531fb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30ddf566-19e7-4db6-b039-3039d9c531fb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-37e178/sub-test-model-37e178\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"30ddf566-19e7-4db6-b039-3039d9c531fb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30ddf566-19e7-4db6-b039-3039d9c531fb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30ddf566-19e7-4db6-b039-3039d9c531fb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30ddf566-19e7-4db6-b039-3039d9c531fb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30ddf566-19e7-4db6-b039-3039d9c531fb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81c5af3b-c015-4150-b838-16a41c4e3a7b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36860","PortSpecifier":{"PortValue":36860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"81c5af3b-c015-4150-b838-16a41c4e3a7b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"81c5af3b-c015-4150-b838-16a41c4e3a7b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36860","PortSpecifier":{"PortValue":36860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370655,"nanos":823501463},"http":{"id":"81c5af3b-c015-4150-b838-16a41c4e3a7b","method":"POST","headers":{":authority":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"81c5af3b-c015-4150-b838-16a41c4e3a7b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"81c5af3b-c015-4150-b838-16a41c4e3a7b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"]}} {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"81c5af3b-c015-4150-b838-16a41c4e3a7b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81c5af3b-c015-4150-b838-16a41c4e3a7b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81c5af3b-c015-4150-b838-16a41c4e3a7b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"81c5af3b-c015-4150-b838-16a41c4e3a7b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-67755c/sub-test-model-67755c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"81c5af3b-c015-4150-b838-16a41c4e3a7b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81c5af3b-c015-4150-b838-16a41c4e3a7b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"81c5af3b-c015-4150-b838-16a41c4e3a7b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81c5af3b-c015-4150-b838-16a41c4e3a7b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"81c5af3b-c015-4150-b838-16a41c4e3a7b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a68a18bc-aba3-4169-a5ce-288f781452b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:56044","PortSpecifier":{"PortValue":56044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a68a18bc-aba3-4169-a5ce-288f781452b2","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a68a18bc-aba3-4169-a5ce-288f781452b2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:56044","PortSpecifier":{"PortValue":56044}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370655,"nanos":859968995},"http":{"id":"a68a18bc-aba3-4169-a5ce-288f781452b2","method":"POST","headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a68a18bc-aba3-4169-a5ce-288f781452b2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gF49h5WFSO9subuy_A08HiZmoLncFwqvOLMcehW0fjTkGc0xXz0UXmsU6gLW"} {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a68a18bc-aba3-4169-a5ce-288f781452b2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gF49h5WFSO9subuy_A08HiZmoLncFwqvOLMcehW0fjTkGc0xXz0UXmsU6gLW\"}"} {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a68a18bc-aba3-4169-a5ce-288f781452b2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0a03a113-172c-4ab1-bc13-7f42bf6abff9","keyName":"e2e-sub-iso-ecd5e8","subscription":"e2e-shared-sub-26c472","tenant":"e2e-shared-a-37e178","userId":"0a03a113-172c-4ab1-bc13-7f42bf6abff9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a68a18bc-aba3-4169-a5ce-288f781452b2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a68a18bc-aba3-4169-a5ce-288f781452b2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a68a18bc-aba3-4169-a5ce-288f781452b2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a68a18bc-aba3-4169-a5ce-288f781452b2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-37e178/sub-test-model-37e178\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a68a18bc-aba3-4169-a5ce-288f781452b2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a68a18bc-aba3-4169-a5ce-288f781452b2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a68a18bc-aba3-4169-a5ce-288f781452b2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-26c472"} {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a68a18bc-aba3-4169-a5ce-288f781452b2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a68a18bc-aba3-4169-a5ce-288f781452b2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a68a18bc-aba3-4169-a5ce-288f781452b2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe8922bf-d2d0-4344-8ae1-c261782f77f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36862","PortSpecifier":{"PortValue":36862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fe8922bf-d2d0-4344-8ae1-c261782f77f0","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe8922bf-d2d0-4344-8ae1-c261782f77f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36862","PortSpecifier":{"PortValue":36862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370655,"nanos":891922876},"http":{"id":"fe8922bf-d2d0-4344-8ae1-c261782f77f0","method":"POST","headers":{":authority":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fe8922bf-d2d0-4344-8ae1-c261782f77f0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-13wMvUuR8ze0AXWx6_HDV5J5S798gYDAc0hIhQ0hcf0tIS1FgY5WvEHD99xuF"} {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fe8922bf-d2d0-4344-8ae1-c261782f77f0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-67755c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-13wMvUuR8ze0AXWx6_HDV5J5S798gYDAc0hIhQ0hcf0tIS1FgY5WvEHD99xuF\"}"} {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fe8922bf-d2d0-4344-8ae1-c261782f77f0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-67755c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a4b04edf-dafa-4bcb-bb4e-138ca5a000c9","keyName":"e2e-sub-iso-d1cec0","subscription":"e2e-shared-sub-26c472","tenant":"e2e-shared-b-67755c","userId":"a4b04edf-dafa-4bcb-bb4e-138ca5a000c9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fe8922bf-d2d0-4344-8ae1-c261782f77f0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe8922bf-d2d0-4344-8ae1-c261782f77f0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe8922bf-d2d0-4344-8ae1-c261782f77f0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe8922bf-d2d0-4344-8ae1-c261782f77f0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-67755c/sub-test-model-67755c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fe8922bf-d2d0-4344-8ae1-c261782f77f0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe8922bf-d2d0-4344-8ae1-c261782f77f0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe8922bf-d2d0-4344-8ae1-c261782f77f0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-26c472"} {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe8922bf-d2d0-4344-8ae1-c261782f77f0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe8922bf-d2d0-4344-8ae1-c261782f77f0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:44:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe8922bf-d2d0-4344-8ae1-c261782f77f0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78c20bc366ccee1e550d1b3a2595dd670cf8a780b914580420c303370d6f5d2c"} {"level":"info","ts":"2026-07-06T20:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08a9fa285ec2bafe158a91d994960beebb20a11ebeafe4ed9c8fdab49ce243a6"} {"level":"info","ts":"2026-07-06T20:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67846f04746e48dd8429b1899ff084ad8a1fd5470d0743e1f60d58f961db9745"} {"level":"info","ts":"2026-07-06T20:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5431976c600811618ead93f74941f63ac3e6cb64982a1dbb11842d9c52b193ad"} {"level":"info","ts":"2026-07-06T20:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bcb3526c7cf6d4bf6a1ce65285555ad087766b492cb81343f825cbad757ed44f"} {"level":"info","ts":"2026-07-06T20:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5abdc857d5e50d07dc64a9d7e71789323f4b34d693a3659fcba1e9b5a5ebd816"} {"level":"info","ts":"2026-07-06T20:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7fa62fa91a2eb44d781baac04735e30b40f4cf880af445723ac0762e2a2df1e1"} {"level":"info","ts":"2026-07-06T20:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2af78dcdbacbd6d1e2ab0dc149dc35a1d72fe6fc99c1923e1452c6a647b1e76c"} {"level":"info","ts":"2026-07-06T20:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b0836069eb9b1029e5f7a9c5cd1c13159a92ec57aa7932562f1d4264a10b4dcc"} {"level":"info","ts":"2026-07-06T20:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/44968d4459e27057b80fc21a4d2ab1efd08464f9514d1723a2411403811b46df"} {"level":"info","ts":"2026-07-06T20:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0ed71567f2db788e0146ffebfa15c47e231262f0b303863fbe3d47580060b7ee"} {"level":"info","ts":"2026-07-06T20:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/913374d1053cd0a7cfdc4679a54509f2a22ded266091a8ff0edc9b65c6a35205"} {"level":"info","ts":"2026-07-06T20:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54c244ada4135261093155c9f3f0522aa0e89218f40fbcc08bbb39d5a15c2a14"} {"level":"info","ts":"2026-07-06T20:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/24ecd8e1bda13c53e8e8da10825f6d459033a6341fa8a606c609e406b3b94224"} {"level":"info","ts":"2026-07-06T20:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/79bd2b8eb85591735697daaccf5f571c73180a93465943597f8119cd98943fff"} {"level":"info","ts":"2026-07-06T20:44:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc23032847769508efbea5e6ab3fd29deb87324bf5fe83dec6dc60cbe9923506"} {"level":"debug","ts":"2026-07-06T20:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"673d999ebc9d265d6bc8adf070dc0ce432723c35749b7d2eac8821653217efa9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:44:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:44:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"673d999ebc9d265d6bc8adf070dc0ce432723c35749b7d2eac8821653217efa9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"673d999ebc9d265d6bc8adf070dc0ce432723c35749b7d2eac8821653217efa9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/673d999ebc9d265d6bc8adf070dc0ce432723c35749b7d2eac8821653217efa9"} {"level":"debug","ts":"2026-07-06T20:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"673d999ebc9d265d6bc8adf070dc0ce432723c35749b7d2eac8821653217efa9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:44:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/673d999ebc9d265d6bc8adf070dc0ce432723c35749b7d2eac8821653217efa9"} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"673d999ebc9d265d6bc8adf070dc0ce432723c35749b7d2eac8821653217efa9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["673d999ebc9d265d6bc8adf070dc0ce432723c35749b7d2eac8821653217efa9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"673d999ebc9d265d6bc8adf070dc0ce432723c35749b7d2eac8821653217efa9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"673d999ebc9d265d6bc8adf070dc0ce432723c35749b7d2eac8821653217efa9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"673d999ebc9d265d6bc8adf070dc0ce432723c35749b7d2eac8821653217efa9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"673d999ebc9d265d6bc8adf070dc0ce432723c35749b7d2eac8821653217efa9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/673d999ebc9d265d6bc8adf070dc0ce432723c35749b7d2eac8821653217efa9"} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"673d999ebc9d265d6bc8adf070dc0ce432723c35749b7d2eac8821653217efa9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/673d999ebc9d265d6bc8adf070dc0ce432723c35749b7d2eac8821653217efa9"} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"673d999ebc9d265d6bc8adf070dc0ce432723c35749b7d2eac8821653217efa9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["673d999ebc9d265d6bc8adf070dc0ce432723c35749b7d2eac8821653217efa9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"673d999ebc9d265d6bc8adf070dc0ce432723c35749b7d2eac8821653217efa9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"673d999ebc9d265d6bc8adf070dc0ce432723c35749b7d2eac8821653217efa9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"673d999ebc9d265d6bc8adf070dc0ce432723c35749b7d2eac8821653217efa9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"673d999ebc9d265d6bc8adf070dc0ce432723c35749b7d2eac8821653217efa9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/673d999ebc9d265d6bc8adf070dc0ce432723c35749b7d2eac8821653217efa9"} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"673d999ebc9d265d6bc8adf070dc0ce432723c35749b7d2eac8821653217efa9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"673d999ebc9d265d6bc8adf070dc0ce432723c35749b7d2eac8821653217efa9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/673d999ebc9d265d6bc8adf070dc0ce432723c35749b7d2eac8821653217efa9"} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f17ea20dad0f15731108e49f5e0d328120be854f2f670d748df2b98624230ea5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f17ea20dad0f15731108e49f5e0d328120be854f2f670d748df2b98624230ea5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"673d999ebc9d265d6bc8adf070dc0ce432723c35749b7d2eac8821653217efa9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["673d999ebc9d265d6bc8adf070dc0ce432723c35749b7d2eac8821653217efa9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f17ea20dad0f15731108e49f5e0d328120be854f2f670d748df2b98624230ea5"} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"673d999ebc9d265d6bc8adf070dc0ce432723c35749b7d2eac8821653217efa9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f17ea20dad0f15731108e49f5e0d328120be854f2f670d748df2b98624230ea5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"673d999ebc9d265d6bc8adf070dc0ce432723c35749b7d2eac8821653217efa9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f17ea20dad0f15731108e49f5e0d328120be854f2f670d748df2b98624230ea5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f17ea20dad0f15731108e49f5e0d328120be854f2f670d748df2b98624230ea5"} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f17ea20dad0f15731108e49f5e0d328120be854f2f670d748df2b98624230ea5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f17ea20dad0f15731108e49f5e0d328120be854f2f670d748df2b98624230ea5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/673d999ebc9d265d6bc8adf070dc0ce432723c35749b7d2eac8821653217efa9"} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f17ea20dad0f15731108e49f5e0d328120be854f2f670d748df2b98624230ea5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f17ea20dad0f15731108e49f5e0d328120be854f2f670d748df2b98624230ea5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f17ea20dad0f15731108e49f5e0d328120be854f2f670d748df2b98624230ea5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f17ea20dad0f15731108e49f5e0d328120be854f2f670d748df2b98624230ea5"} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39"} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f17ea20dad0f15731108e49f5e0d328120be854f2f670d748df2b98624230ea5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f17ea20dad0f15731108e49f5e0d328120be854f2f670d748df2b98624230ea5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f17ea20dad0f15731108e49f5e0d328120be854f2f670d748df2b98624230ea5"} {"level":"error","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f17ea20dad0f15731108e49f5e0d328120be854f2f670d748df2b98624230ea5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f17ea20dad0f15731108e49f5e0d328120be854f2f670d748df2b98624230ea5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39"} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f17ea20dad0f15731108e49f5e0d328120be854f2f670d748df2b98624230ea5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f17ea20dad0f15731108e49f5e0d328120be854f2f670d748df2b98624230ea5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8379e8eb9e8a5c6806513c136b9d3c8bf84dddf47321becfe099805b3a632376","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39"} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8379e8eb9e8a5c6806513c136b9d3c8bf84dddf47321becfe099805b3a632376","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f17ea20dad0f15731108e49f5e0d328120be854f2f670d748df2b98624230ea5"} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8379e8eb9e8a5c6806513c136b9d3c8bf84dddf47321becfe099805b3a632376","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8379e8eb9e8a5c6806513c136b9d3c8bf84dddf47321becfe099805b3a632376"} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8379e8eb9e8a5c6806513c136b9d3c8bf84dddf47321becfe099805b3a632376","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8379e8eb9e8a5c6806513c136b9d3c8bf84dddf47321becfe099805b3a632376","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8379e8eb9e8a5c6806513c136b9d3c8bf84dddf47321becfe099805b3a632376"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39"} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8379e8eb9e8a5c6806513c136b9d3c8bf84dddf47321becfe099805b3a632376","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8379e8eb9e8a5c6806513c136b9d3c8bf84dddf47321becfe099805b3a632376","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8379e8eb9e8a5c6806513c136b9d3c8bf84dddf47321becfe099805b3a632376"} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8379e8eb9e8a5c6806513c136b9d3c8bf84dddf47321becfe099805b3a632376","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39"} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8379e8eb9e8a5c6806513c136b9d3c8bf84dddf47321becfe099805b3a632376","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8379e8eb9e8a5c6806513c136b9d3c8bf84dddf47321becfe099805b3a632376","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8379e8eb9e8a5c6806513c136b9d3c8bf84dddf47321becfe099805b3a632376"} {"level":"error","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39"} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8379e8eb9e8a5c6806513c136b9d3c8bf84dddf47321becfe099805b3a632376","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8379e8eb9e8a5c6806513c136b9d3c8bf84dddf47321becfe099805b3a632376"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8379e8eb9e8a5c6806513c136b9d3c8bf84dddf47321becfe099805b3a632376","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8379e8eb9e8a5c6806513c136b9d3c8bf84dddf47321becfe099805b3a632376","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39"} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8379e8eb9e8a5c6806513c136b9d3c8bf84dddf47321becfe099805b3a632376"} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39"} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39"} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97a911f001a6ed61c5ed4203801dd8e2e592e04a860cdeebc09f93e3988e25dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39"} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97a911f001a6ed61c5ed4203801dd8e2e592e04a860cdeebc09f93e3988e25dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97a911f001a6ed61c5ed4203801dd8e2e592e04a860cdeebc09f93e3988e25dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97a911f001a6ed61c5ed4203801dd8e2e592e04a860cdeebc09f93e3988e25dc"} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97a911f001a6ed61c5ed4203801dd8e2e592e04a860cdeebc09f93e3988e25dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39"} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97a911f001a6ed61c5ed4203801dd8e2e592e04a860cdeebc09f93e3988e25dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97a911f001a6ed61c5ed4203801dd8e2e592e04a860cdeebc09f93e3988e25dc"} {"level":"error","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97a911f001a6ed61c5ed4203801dd8e2e592e04a860cdeebc09f93e3988e25dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97a911f001a6ed61c5ed4203801dd8e2e592e04a860cdeebc09f93e3988e25dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39"} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97a911f001a6ed61c5ed4203801dd8e2e592e04a860cdeebc09f93e3988e25dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97a911f001a6ed61c5ed4203801dd8e2e592e04a860cdeebc09f93e3988e25dc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97a911f001a6ed61c5ed4203801dd8e2e592e04a860cdeebc09f93e3988e25dc"} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58da53f1b8bee7531ad1cd81770fac2306a3ec727f8fa74d79bef61247fd65b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:44:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58da53f1b8bee7531ad1cd81770fac2306a3ec727f8fa74d79bef61247fd65b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58da53f1b8bee7531ad1cd81770fac2306a3ec727f8fa74d79bef61247fd65b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58da53f1b8bee7531ad1cd81770fac2306a3ec727f8fa74d79bef61247fd65b4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58da53f1b8bee7531ad1cd81770fac2306a3ec727f8fa74d79bef61247fd65b4"} {"level":"debug","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58da53f1b8bee7531ad1cd81770fac2306a3ec727f8fa74d79bef61247fd65b4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:44:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58da53f1b8bee7531ad1cd81770fac2306a3ec727f8fa74d79bef61247fd65b4"} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58da53f1b8bee7531ad1cd81770fac2306a3ec727f8fa74d79bef61247fd65b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58da53f1b8bee7531ad1cd81770fac2306a3ec727f8fa74d79bef61247fd65b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58da53f1b8bee7531ad1cd81770fac2306a3ec727f8fa74d79bef61247fd65b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58da53f1b8bee7531ad1cd81770fac2306a3ec727f8fa74d79bef61247fd65b4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74c432120d1906e7bd33e8f595937de815b4602dac5773b4765bcfaa9d0a4dbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58da53f1b8bee7531ad1cd81770fac2306a3ec727f8fa74d79bef61247fd65b4"} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74c432120d1906e7bd33e8f595937de815b4602dac5773b4765bcfaa9d0a4dbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74c432120d1906e7bd33e8f595937de815b4602dac5773b4765bcfaa9d0a4dbd"} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74c432120d1906e7bd33e8f595937de815b4602dac5773b4765bcfaa9d0a4dbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74c432120d1906e7bd33e8f595937de815b4602dac5773b4765bcfaa9d0a4dbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e"} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74c432120d1906e7bd33e8f595937de815b4602dac5773b4765bcfaa9d0a4dbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74c432120d1906e7bd33e8f595937de815b4602dac5773b4765bcfaa9d0a4dbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74c432120d1906e7bd33e8f595937de815b4602dac5773b4765bcfaa9d0a4dbd"} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74c432120d1906e7bd33e8f595937de815b4602dac5773b4765bcfaa9d0a4dbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e"} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74c432120d1906e7bd33e8f595937de815b4602dac5773b4765bcfaa9d0a4dbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74c432120d1906e7bd33e8f595937de815b4602dac5773b4765bcfaa9d0a4dbd"} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74c432120d1906e7bd33e8f595937de815b4602dac5773b4765bcfaa9d0a4dbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74c432120d1906e7bd33e8f595937de815b4602dac5773b4765bcfaa9d0a4dbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74c432120d1906e7bd33e8f595937de815b4602dac5773b4765bcfaa9d0a4dbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e"} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74c432120d1906e7bd33e8f595937de815b4602dac5773b4765bcfaa9d0a4dbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74c432120d1906e7bd33e8f595937de815b4602dac5773b4765bcfaa9d0a4dbd"} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74c432120d1906e7bd33e8f595937de815b4602dac5773b4765bcfaa9d0a4dbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74c432120d1906e7bd33e8f595937de815b4602dac5773b4765bcfaa9d0a4dbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74c432120d1906e7bd33e8f595937de815b4602dac5773b4765bcfaa9d0a4dbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e"} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74c432120d1906e7bd33e8f595937de815b4602dac5773b4765bcfaa9d0a4dbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74c432120d1906e7bd33e8f595937de815b4602dac5773b4765bcfaa9d0a4dbd"} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74c432120d1906e7bd33e8f595937de815b4602dac5773b4765bcfaa9d0a4dbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74c432120d1906e7bd33e8f595937de815b4602dac5773b4765bcfaa9d0a4dbd"} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74c432120d1906e7bd33e8f595937de815b4602dac5773b4765bcfaa9d0a4dbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e"} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"74c432120d1906e7bd33e8f595937de815b4602dac5773b4765bcfaa9d0a4dbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["74c432120d1906e7bd33e8f595937de815b4602dac5773b4765bcfaa9d0a4dbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"74c432120d1906e7bd33e8f595937de815b4602dac5773b4765bcfaa9d0a4dbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74c432120d1906e7bd33e8f595937de815b4602dac5773b4765bcfaa9d0a4dbd"} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74c432120d1906e7bd33e8f595937de815b4602dac5773b4765bcfaa9d0a4dbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e"} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74c432120d1906e7bd33e8f595937de815b4602dac5773b4765bcfaa9d0a4dbd"} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e"} {"level":"error","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e"} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e"} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e"} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e"} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e"} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e"} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e"} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e"} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e"} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e"} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e"} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e"} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:44:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:44:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e"} {"level":"debug","ts":"2026-07-06T20:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963"} {"level":"debug","ts":"2026-07-06T20:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963"} {"level":"debug","ts":"2026-07-06T20:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963"} {"level":"debug","ts":"2026-07-06T20:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963"} {"level":"debug","ts":"2026-07-06T20:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963"} {"level":"debug","ts":"2026-07-06T20:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7"} {"level":"debug","ts":"2026-07-06T20:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7"} {"level":"debug","ts":"2026-07-06T20:45:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7"} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7"} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5"} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5"} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5"} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7"} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5"} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5"} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5"} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5"} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc"} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc"} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5"} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc"} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc"} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc"} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f09fb3bc6d0974bdaa151df85b0b0fb7aa64f9656839a96b2cf28de4a137d994","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f09fb3bc6d0974bdaa151df85b0b0fb7aa64f9656839a96b2cf28de4a137d994","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f09fb3bc6d0974bdaa151df85b0b0fb7aa64f9656839a96b2cf28de4a137d994","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f09fb3bc6d0974bdaa151df85b0b0fb7aa64f9656839a96b2cf28de4a137d994","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc"} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f09fb3bc6d0974bdaa151df85b0b0fb7aa64f9656839a96b2cf28de4a137d994","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f09fb3bc6d0974bdaa151df85b0b0fb7aa64f9656839a96b2cf28de4a137d994"} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f09fb3bc6d0974bdaa151df85b0b0fb7aa64f9656839a96b2cf28de4a137d994","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f09fb3bc6d0974bdaa151df85b0b0fb7aa64f9656839a96b2cf28de4a137d994","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f09fb3bc6d0974bdaa151df85b0b0fb7aa64f9656839a96b2cf28de4a137d994"} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f09fb3bc6d0974bdaa151df85b0b0fb7aa64f9656839a96b2cf28de4a137d994","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f09fb3bc6d0974bdaa151df85b0b0fb7aa64f9656839a96b2cf28de4a137d994"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f09fb3bc6d0974bdaa151df85b0b0fb7aa64f9656839a96b2cf28de4a137d994","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc"} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f09fb3bc6d0974bdaa151df85b0b0fb7aa64f9656839a96b2cf28de4a137d994","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde"} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f09fb3bc6d0974bdaa151df85b0b0fb7aa64f9656839a96b2cf28de4a137d994"} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde"} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde"} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde"} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de6a7ffc088c909c4ab1a9c3f7ca87982d038f390b3b1da1581449162a7266d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de6a7ffc088c909c4ab1a9c3f7ca87982d038f390b3b1da1581449162a7266d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de6a7ffc088c909c4ab1a9c3f7ca87982d038f390b3b1da1581449162a7266d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de6a7ffc088c909c4ab1a9c3f7ca87982d038f390b3b1da1581449162a7266d"} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de6a7ffc088c909c4ab1a9c3f7ca87982d038f390b3b1da1581449162a7266d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de6a7ffc088c909c4ab1a9c3f7ca87982d038f390b3b1da1581449162a7266d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de6a7ffc088c909c4ab1a9c3f7ca87982d038f390b3b1da1581449162a7266d"} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4de6a7ffc088c909c4ab1a9c3f7ca87982d038f390b3b1da1581449162a7266d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4de6a7ffc088c909c4ab1a9c3f7ca87982d038f390b3b1da1581449162a7266d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4de6a7ffc088c909c4ab1a9c3f7ca87982d038f390b3b1da1581449162a7266d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de6a7ffc088c909c4ab1a9c3f7ca87982d038f390b3b1da1581449162a7266d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"} {"level":"debug","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de6a7ffc088c909c4ab1a9c3f7ca87982d038f390b3b1da1581449162a7266d"} {"level":"info","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"} {"level":"info","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"} {"level":"info","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"} {"level":"info","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"} {"level":"debug","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"} {"level":"info","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"} {"level":"debug","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"} {"level":"info","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"} {"level":"debug","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"} {"level":"debug","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"} {"level":"debug","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"} {"level":"info","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"} {"level":"debug","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"} {"level":"debug","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"} {"level":"debug","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"} {"level":"debug","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"} {"level":"debug","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"} {"level":"debug","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"} {"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"} {"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97a911f001a6ed61c5ed4203801dd8e2e592e04a860cdeebc09f93e3988e25dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97a911f001a6ed61c5ed4203801dd8e2e592e04a860cdeebc09f93e3988e25dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97a911f001a6ed61c5ed4203801dd8e2e592e04a860cdeebc09f93e3988e25dc"} {"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97a911f001a6ed61c5ed4203801dd8e2e592e04a860cdeebc09f93e3988e25dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97a911f001a6ed61c5ed4203801dd8e2e592e04a860cdeebc09f93e3988e25dc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97a911f001a6ed61c5ed4203801dd8e2e592e04a860cdeebc09f93e3988e25dc"} {"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97a911f001a6ed61c5ed4203801dd8e2e592e04a860cdeebc09f93e3988e25dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97a911f001a6ed61c5ed4203801dd8e2e592e04a860cdeebc09f93e3988e25dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97a911f001a6ed61c5ed4203801dd8e2e592e04a860cdeebc09f93e3988e25dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97a911f001a6ed61c5ed4203801dd8e2e592e04a860cdeebc09f93e3988e25dc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"} {"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97a911f001a6ed61c5ed4203801dd8e2e592e04a860cdeebc09f93e3988e25dc"} {"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde"} {"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4de6a7ffc088c909c4ab1a9c3f7ca87982d038f390b3b1da1581449162a7266d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4de6a7ffc088c909c4ab1a9c3f7ca87982d038f390b3b1da1581449162a7266d"} {"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963"} {"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963"} {"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f09fb3bc6d0974bdaa151df85b0b0fb7aa64f9656839a96b2cf28de4a137d994","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963"} {"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f09fb3bc6d0974bdaa151df85b0b0fb7aa64f9656839a96b2cf28de4a137d994"} {"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5b59734645bdf4a63639568aaf185d1b8bf5b87c9c86ca92a5642ef756f5d317","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5b59734645bdf4a63639568aaf185d1b8bf5b87c9c86ca92a5642ef756f5d317"} {"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"673d999ebc9d265d6bc8adf070dc0ce432723c35749b7d2eac8821653217efa9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc"} {"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/673d999ebc9d265d6bc8adf070dc0ce432723c35749b7d2eac8821653217efa9"} {"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc"} {"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc"} {"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc"} {"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7dc149239f705d21609e0d042b461383983e8fdb599cd9003df5ff1c0ef89e32","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"} {"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"51fb72a4bb6028e99b2e3bbb5006cbf6602b2f7b6d7a872b5b1070ec5bc29c96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7dc149239f705d21609e0d042b461383983e8fdb599cd9003df5ff1c0ef89e32"} {"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/51fb72a4bb6028e99b2e3bbb5006cbf6602b2f7b6d7a872b5b1070ec5bc29c96"} {"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58da53f1b8bee7531ad1cd81770fac2306a3ec727f8fa74d79bef61247fd65b4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc"} {"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8379e8eb9e8a5c6806513c136b9d3c8bf84dddf47321becfe099805b3a632376","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58da53f1b8bee7531ad1cd81770fac2306a3ec727f8fa74d79bef61247fd65b4"} {"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8379e8eb9e8a5c6806513c136b9d3c8bf84dddf47321becfe099805b3a632376"} {"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39"} {"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f17ea20dad0f15731108e49f5e0d328120be854f2f670d748df2b98624230ea5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5"} {"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f17ea20dad0f15731108e49f5e0d328120be854f2f670d748df2b98624230ea5"} {"level":"debug","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"74c432120d1906e7bd33e8f595937de815b4602dac5773b4765bcfaa9d0a4dbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5"} {"level":"info","ts":"2026-07-06T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e"} {"level":"info","ts":"2026-07-06T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/74c432120d1906e7bd33e8f595937de815b4602dac5773b4765bcfaa9d0a4dbd"} {"level":"debug","ts":"2026-07-06T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7"} {"level":"debug","ts":"2026-07-06T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7"} {"level":"debug","ts":"2026-07-06T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T20:45:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T20:45:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7"} {"level":"debug","ts":"2026-07-06T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7"} {"level":"debug","ts":"2026-07-06T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T20:45:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T20:45:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T20:45:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7"} {"level":"info","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe737cd6-6039-4fc1-a6ad-29fc93a88c35","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59586","PortSpecifier":{"PortValue":59586}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fe737cd6-6039-4fc1-a6ad-29fc93a88c35","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe737cd6-6039-4fc1-a6ad-29fc93a88c35","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59586","PortSpecifier":{"PortValue":59586}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370742,"nanos":72943619},"http":{"id":"fe737cd6-6039-4fc1-a6ad-29fc93a88c35","method":"POST","headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fe737cd6-6039-4fc1-a6ad-29fc93a88c35","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fe737cd6-6039-4fc1-a6ad-29fc93a88c35","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"]}} {"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fe737cd6-6039-4fc1-a6ad-29fc93a88c35","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5b59734645bdf4a63639568aaf185d1b8bf5b87c9c86ca92a5642ef756f5d317"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe737cd6-6039-4fc1-a6ad-29fc93a88c35","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe737cd6-6039-4fc1-a6ad-29fc93a88c35","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe737cd6-6039-4fc1-a6ad-29fc93a88c35","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fe737cd6-6039-4fc1-a6ad-29fc93a88c35","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe737cd6-6039-4fc1-a6ad-29fc93a88c35","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe737cd6-6039-4fc1-a6ad-29fc93a88c35","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe737cd6-6039-4fc1-a6ad-29fc93a88c35","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe737cd6-6039-4fc1-a6ad-29fc93a88c35","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3c80922-01c1-4e10-8064-3e9543d30195","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:43186","PortSpecifier":{"PortValue":43186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c3c80922-01c1-4e10-8064-3e9543d30195","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3c80922-01c1-4e10-8064-3e9543d30195","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:43186","PortSpecifier":{"PortValue":43186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370742,"nanos":112950760},"http":{"id":"c3c80922-01c1-4e10-8064-3e9543d30195","method":"POST","headers":{":authority":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c3c80922-01c1-4e10-8064-3e9543d30195","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c3c80922-01c1-4e10-8064-3e9543d30195","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"]}} {"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c3c80922-01c1-4e10-8064-3e9543d30195","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3c80922-01c1-4e10-8064-3e9543d30195","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3c80922-01c1-4e10-8064-3e9543d30195","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3c80922-01c1-4e10-8064-3e9543d30195","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-67755c/rate-test-model-67755c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c3c80922-01c1-4e10-8064-3e9543d30195","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3c80922-01c1-4e10-8064-3e9543d30195","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3c80922-01c1-4e10-8064-3e9543d30195","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3c80922-01c1-4e10-8064-3e9543d30195","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3c80922-01c1-4e10-8064-3e9543d30195","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5bb6fcf-fbea-429a-bd9a-b3d5a13f1dea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59602","PortSpecifier":{"PortValue":59602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b5bb6fcf-fbea-429a-bd9a-b3d5a13f1dea","method":"POST","path":"/ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178/v1/completions","host":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5bb6fcf-fbea-429a-bd9a-b3d5a13f1dea","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59602","PortSpecifier":{"PortValue":59602}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370742,"nanos":159803046},"http":{"id":"b5bb6fcf-fbea-429a-bd9a-b3d5a13f1dea","method":"POST","headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b5bb6fcf-fbea-429a-bd9a-b3d5a13f1dea","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-As8GgaTsRqW3yjPp_LzyKiHKyWsL6zctMQiPNVTM4eKh6UxdADorZZhba5Mk"} {"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b5bb6fcf-fbea-429a-bd9a-b3d5a13f1dea","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-As8GgaTsRqW3yjPp_LzyKiHKyWsL6zctMQiPNVTM4eKh6UxdADorZZhba5Mk\"}"} {"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b5bb6fcf-fbea-429a-bd9a-b3d5a13f1dea","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d3a557b3-a5b6-4674-9a3c-472fcf2c89d2","keyName":"e2e-rate-a-898117","subscription":"e2e-rate-iso-a-898117","tenant":"e2e-shared-a-37e178","userId":"d3a557b3-a5b6-4674-9a3c-472fcf2c89d2","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b5bb6fcf-fbea-429a-bd9a-b3d5a13f1dea","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178\",\"requestedSubscription\":\"e2e-rate-iso-a-898117\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b5bb6fcf-fbea-429a-bd9a-b3d5a13f1dea","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-37e178","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-898117","namespace":"ai-tenant-e2e-shared-a-37e178","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b5bb6fcf-fbea-429a-bd9a-b3d5a13f1dea","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5bb6fcf-fbea-429a-bd9a-b3d5a13f1dea","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5bb6fcf-fbea-429a-bd9a-b3d5a13f1dea","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5bb6fcf-fbea-429a-bd9a-b3d5a13f1dea","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5bb6fcf-fbea-429a-bd9a-b3d5a13f1dea","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5bb6fcf-fbea-429a-bd9a-b3d5a13f1dea","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-898117"} {"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5bb6fcf-fbea-429a-bd9a-b3d5a13f1dea","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5bb6fcf-fbea-429a-bd9a-b3d5a13f1dea","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5bb6fcf-fbea-429a-bd9a-b3d5a13f1dea","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d3a557b3-a5b6-4674-9a3c-472fcf2c89d2","keyName":"e2e-rate-a-898117","selected_subscription":"e2e-rate-iso-a-898117","selected_subscription_key":"ai-tenant-e2e-shared-a-37e178/e2e-rate-iso-a-898117@ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-37e178","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-898117","namespace":"ai-tenant-e2e-shared-a-37e178","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5bb6fcf-fbea-429a-bd9a-b3d5a13f1dea","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:45:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5bb6fcf-fbea-429a-bd9a-b3d5a13f1dea","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:45:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0166dce3-dada-47af-ae9d-e80f1486e133","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59606","PortSpecifier":{"PortValue":59606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0166dce3-dada-47af-ae9d-e80f1486e133","method":"POST","path":"/ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178/v1/completions","host":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:45:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0166dce3-dada-47af-ae9d-e80f1486e133","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59606","PortSpecifier":{"PortValue":59606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370743,"nanos":222548773},"http":{"id":"0166dce3-dada-47af-ae9d-e80f1486e133","method":"POST","headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:45:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0166dce3-dada-47af-ae9d-e80f1486e133","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-As8GgaTsRqW3yjPp_LzyKiHKyWsL6zctMQiPNVTM4eKh6UxdADorZZhba5Mk"} {"level":"debug","ts":"2026-07-06T20:45:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0166dce3-dada-47af-ae9d-e80f1486e133","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-As8GgaTsRqW3yjPp_LzyKiHKyWsL6zctMQiPNVTM4eKh6UxdADorZZhba5Mk\"}"} {"level":"debug","ts":"2026-07-06T20:45:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0166dce3-dada-47af-ae9d-e80f1486e133","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d3a557b3-a5b6-4674-9a3c-472fcf2c89d2","keyName":"e2e-rate-a-898117","subscription":"e2e-rate-iso-a-898117","tenant":"e2e-shared-a-37e178","userId":"d3a557b3-a5b6-4674-9a3c-472fcf2c89d2","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T20:45:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0166dce3-dada-47af-ae9d-e80f1486e133","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178\",\"requestedSubscription\":\"e2e-rate-iso-a-898117\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T20:45:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0166dce3-dada-47af-ae9d-e80f1486e133","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-37e178","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-898117","namespace":"ai-tenant-e2e-shared-a-37e178","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T20:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0166dce3-dada-47af-ae9d-e80f1486e133","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0166dce3-dada-47af-ae9d-e80f1486e133","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0166dce3-dada-47af-ae9d-e80f1486e133","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0166dce3-dada-47af-ae9d-e80f1486e133","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:45:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0166dce3-dada-47af-ae9d-e80f1486e133","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0166dce3-dada-47af-ae9d-e80f1486e133","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0166dce3-dada-47af-ae9d-e80f1486e133","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T20:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0166dce3-dada-47af-ae9d-e80f1486e133","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-898117"} {"level":"debug","ts":"2026-07-06T20:45:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0166dce3-dada-47af-ae9d-e80f1486e133","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d3a557b3-a5b6-4674-9a3c-472fcf2c89d2","keyName":"e2e-rate-a-898117","selected_subscription":"e2e-rate-iso-a-898117","selected_subscription_key":"ai-tenant-e2e-shared-a-37e178/e2e-rate-iso-a-898117@ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-37e178","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-898117","namespace":"ai-tenant-e2e-shared-a-37e178","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T20:45:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0166dce3-dada-47af-ae9d-e80f1486e133","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:45:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0166dce3-dada-47af-ae9d-e80f1486e133","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:45:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a456c799-ff04-41a2-bf3f-7c8e082cf9c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59620","PortSpecifier":{"PortValue":59620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a456c799-ff04-41a2-bf3f-7c8e082cf9c9","method":"POST","path":"/ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178/v1/completions","host":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:45:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a456c799-ff04-41a2-bf3f-7c8e082cf9c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59620","PortSpecifier":{"PortValue":59620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370744,"nanos":260553598},"http":{"id":"a456c799-ff04-41a2-bf3f-7c8e082cf9c9","method":"POST","headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:45:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a456c799-ff04-41a2-bf3f-7c8e082cf9c9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-As8GgaTsRqW3yjPp_LzyKiHKyWsL6zctMQiPNVTM4eKh6UxdADorZZhba5Mk"} {"level":"debug","ts":"2026-07-06T20:45:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a456c799-ff04-41a2-bf3f-7c8e082cf9c9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-As8GgaTsRqW3yjPp_LzyKiHKyWsL6zctMQiPNVTM4eKh6UxdADorZZhba5Mk\"}"} {"level":"debug","ts":"2026-07-06T20:45:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a456c799-ff04-41a2-bf3f-7c8e082cf9c9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d3a557b3-a5b6-4674-9a3c-472fcf2c89d2","keyName":"e2e-rate-a-898117","subscription":"e2e-rate-iso-a-898117","tenant":"e2e-shared-a-37e178","userId":"d3a557b3-a5b6-4674-9a3c-472fcf2c89d2","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T20:45:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a456c799-ff04-41a2-bf3f-7c8e082cf9c9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178\",\"requestedSubscription\":\"e2e-rate-iso-a-898117\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T20:45:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a456c799-ff04-41a2-bf3f-7c8e082cf9c9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-37e178","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-898117","namespace":"ai-tenant-e2e-shared-a-37e178","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T20:45:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a456c799-ff04-41a2-bf3f-7c8e082cf9c9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:45:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a456c799-ff04-41a2-bf3f-7c8e082cf9c9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:45:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a456c799-ff04-41a2-bf3f-7c8e082cf9c9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:45:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a456c799-ff04-41a2-bf3f-7c8e082cf9c9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:45:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a456c799-ff04-41a2-bf3f-7c8e082cf9c9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:45:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a456c799-ff04-41a2-bf3f-7c8e082cf9c9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-898117"} {"level":"debug","ts":"2026-07-06T20:45:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a456c799-ff04-41a2-bf3f-7c8e082cf9c9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:45:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a456c799-ff04-41a2-bf3f-7c8e082cf9c9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T20:45:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a456c799-ff04-41a2-bf3f-7c8e082cf9c9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d3a557b3-a5b6-4674-9a3c-472fcf2c89d2","keyName":"e2e-rate-a-898117","selected_subscription":"e2e-rate-iso-a-898117","selected_subscription_key":"ai-tenant-e2e-shared-a-37e178/e2e-rate-iso-a-898117@ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-37e178","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-898117","namespace":"ai-tenant-e2e-shared-a-37e178","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T20:45:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a456c799-ff04-41a2-bf3f-7c8e082cf9c9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:45:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a456c799-ff04-41a2-bf3f-7c8e082cf9c9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"707b4a5e-f24e-4ae1-9482-847823f0d5cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44906","PortSpecifier":{"PortValue":44906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"707b4a5e-f24e-4ae1-9482-847823f0d5cd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"707b4a5e-f24e-4ae1-9482-847823f0d5cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44906","PortSpecifier":{"PortValue":44906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370755,"nanos":97146180},"http":{"id":"707b4a5e-f24e-4ae1-9482-847823f0d5cd","method":"POST","headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"707b4a5e-f24e-4ae1-9482-847823f0d5cd","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"707b4a5e-f24e-4ae1-9482-847823f0d5cd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"]}} {"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"707b4a5e-f24e-4ae1-9482-847823f0d5cd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"5b59734645bdf4a63639568aaf185d1b8bf5b87c9c86ca92a5642ef756f5d317"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.65:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"707b4a5e-f24e-4ae1-9482-847823f0d5cd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"707b4a5e-f24e-4ae1-9482-847823f0d5cd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"707b4a5e-f24e-4ae1-9482-847823f0d5cd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"707b4a5e-f24e-4ae1-9482-847823f0d5cd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"707b4a5e-f24e-4ae1-9482-847823f0d5cd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"707b4a5e-f24e-4ae1-9482-847823f0d5cd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"707b4a5e-f24e-4ae1-9482-847823f0d5cd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"707b4a5e-f24e-4ae1-9482-847823f0d5cd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc50aa35-074f-4553-98e2-cc1378bdc72b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:56680","PortSpecifier":{"PortValue":56680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cc50aa35-074f-4553-98e2-cc1378bdc72b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cc50aa35-074f-4553-98e2-cc1378bdc72b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:56680","PortSpecifier":{"PortValue":56680}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370755,"nanos":136335776},"http":{"id":"cc50aa35-074f-4553-98e2-cc1378bdc72b","method":"POST","headers":{":authority":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cc50aa35-074f-4553-98e2-cc1378bdc72b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cc50aa35-074f-4553-98e2-cc1378bdc72b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"]}} {"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cc50aa35-074f-4553-98e2-cc1378bdc72b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/481d7ae742a7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=c03c41b3-19c7-41c4-9e25-3d2229620ac7"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b8f9b8ab-acb8-4015-b10e-b5d8c8358257","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.44:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc50aa35-074f-4553-98e2-cc1378bdc72b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc50aa35-074f-4553-98e2-cc1378bdc72b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cc50aa35-074f-4553-98e2-cc1378bdc72b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-67755c/rate-test-model-67755c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cc50aa35-074f-4553-98e2-cc1378bdc72b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc50aa35-074f-4553-98e2-cc1378bdc72b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cc50aa35-074f-4553-98e2-cc1378bdc72b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc50aa35-074f-4553-98e2-cc1378bdc72b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cc50aa35-074f-4553-98e2-cc1378bdc72b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa3a94e2-3d55-4eae-a368-a19b599f377a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44912","PortSpecifier":{"PortValue":44912}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aa3a94e2-3d55-4eae-a368-a19b599f377a","method":"POST","path":"/ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178/v1/completions","host":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa3a94e2-3d55-4eae-a368-a19b599f377a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44912","PortSpecifier":{"PortValue":44912}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370755,"nanos":175377826},"http":{"id":"aa3a94e2-3d55-4eae-a368-a19b599f377a","method":"POST","headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aa3a94e2-3d55-4eae-a368-a19b599f377a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-19DnxQa4AGcPJeh7Z_TJkqXRq9RsPQevHGqKzqkfSNupKFhpKnbYAAsdGj5r4"} {"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aa3a94e2-3d55-4eae-a368-a19b599f377a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-19DnxQa4AGcPJeh7Z_TJkqXRq9RsPQevHGqKzqkfSNupKFhpKnbYAAsdGj5r4\"}"} {"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aa3a94e2-3d55-4eae-a368-a19b599f377a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"87f9afb5-9d25-41d0-b6df-b2307245db55","keyName":"e2e-rate-a-0f66d5","subscription":"e2e-rate-iso-a-0f66d5","tenant":"e2e-shared-a-37e178","userId":"87f9afb5-9d25-41d0-b6df-b2307245db55","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"aa3a94e2-3d55-4eae-a368-a19b599f377a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178\",\"requestedSubscription\":\"e2e-rate-iso-a-0f66d5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"aa3a94e2-3d55-4eae-a368-a19b599f377a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-37e178","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0f66d5","namespace":"ai-tenant-e2e-shared-a-37e178","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aa3a94e2-3d55-4eae-a368-a19b599f377a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa3a94e2-3d55-4eae-a368-a19b599f377a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa3a94e2-3d55-4eae-a368-a19b599f377a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa3a94e2-3d55-4eae-a368-a19b599f377a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa3a94e2-3d55-4eae-a368-a19b599f377a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa3a94e2-3d55-4eae-a368-a19b599f377a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa3a94e2-3d55-4eae-a368-a19b599f377a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa3a94e2-3d55-4eae-a368-a19b599f377a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0f66d5"} {"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa3a94e2-3d55-4eae-a368-a19b599f377a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"87f9afb5-9d25-41d0-b6df-b2307245db55","keyName":"e2e-rate-a-0f66d5","selected_subscription":"e2e-rate-iso-a-0f66d5","selected_subscription_key":"ai-tenant-e2e-shared-a-37e178/e2e-rate-iso-a-0f66d5@ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-37e178","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0f66d5","namespace":"ai-tenant-e2e-shared-a-37e178","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa3a94e2-3d55-4eae-a368-a19b599f377a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:45:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa3a94e2-3d55-4eae-a368-a19b599f377a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:45:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95ff0030-39ae-43b1-a6d0-f9fa54de258c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33014","PortSpecifier":{"PortValue":33014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"95ff0030-39ae-43b1-a6d0-f9fa54de258c","method":"POST","path":"/ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178/v1/completions","host":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:45:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95ff0030-39ae-43b1-a6d0-f9fa54de258c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33014","PortSpecifier":{"PortValue":33014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370756,"nanos":211722309},"http":{"id":"95ff0030-39ae-43b1-a6d0-f9fa54de258c","method":"POST","headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:45:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"95ff0030-39ae-43b1-a6d0-f9fa54de258c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-19DnxQa4AGcPJeh7Z_TJkqXRq9RsPQevHGqKzqkfSNupKFhpKnbYAAsdGj5r4"} {"level":"debug","ts":"2026-07-06T20:45:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"95ff0030-39ae-43b1-a6d0-f9fa54de258c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-19DnxQa4AGcPJeh7Z_TJkqXRq9RsPQevHGqKzqkfSNupKFhpKnbYAAsdGj5r4\"}"} {"level":"debug","ts":"2026-07-06T20:45:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"95ff0030-39ae-43b1-a6d0-f9fa54de258c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"87f9afb5-9d25-41d0-b6df-b2307245db55","keyName":"e2e-rate-a-0f66d5","subscription":"e2e-rate-iso-a-0f66d5","tenant":"e2e-shared-a-37e178","userId":"87f9afb5-9d25-41d0-b6df-b2307245db55","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T20:45:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"95ff0030-39ae-43b1-a6d0-f9fa54de258c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178\",\"requestedSubscription\":\"e2e-rate-iso-a-0f66d5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T20:45:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"95ff0030-39ae-43b1-a6d0-f9fa54de258c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-37e178","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0f66d5","namespace":"ai-tenant-e2e-shared-a-37e178","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T20:45:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"95ff0030-39ae-43b1-a6d0-f9fa54de258c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:45:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95ff0030-39ae-43b1-a6d0-f9fa54de258c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:45:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95ff0030-39ae-43b1-a6d0-f9fa54de258c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:45:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95ff0030-39ae-43b1-a6d0-f9fa54de258c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:45:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95ff0030-39ae-43b1-a6d0-f9fa54de258c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:45:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95ff0030-39ae-43b1-a6d0-f9fa54de258c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:45:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95ff0030-39ae-43b1-a6d0-f9fa54de258c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0f66d5"} {"level":"debug","ts":"2026-07-06T20:45:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95ff0030-39ae-43b1-a6d0-f9fa54de258c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T20:45:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95ff0030-39ae-43b1-a6d0-f9fa54de258c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"87f9afb5-9d25-41d0-b6df-b2307245db55","keyName":"e2e-rate-a-0f66d5","selected_subscription":"e2e-rate-iso-a-0f66d5","selected_subscription_key":"ai-tenant-e2e-shared-a-37e178/e2e-rate-iso-a-0f66d5@ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-37e178","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0f66d5","namespace":"ai-tenant-e2e-shared-a-37e178","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T20:45:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95ff0030-39ae-43b1-a6d0-f9fa54de258c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:45:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95ff0030-39ae-43b1-a6d0-f9fa54de258c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47649ed3-170d-4787-8340-7be1301bbd5d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33028","PortSpecifier":{"PortValue":33028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"47649ed3-170d-4787-8340-7be1301bbd5d","method":"POST","path":"/ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178/v1/completions","host":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47649ed3-170d-4787-8340-7be1301bbd5d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33028","PortSpecifier":{"PortValue":33028}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.65:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370757,"nanos":249655428},"http":{"id":"47649ed3-170d-4787-8340-7be1301bbd5d","method":"POST","headers":{":authority":"e2e-shared-a-37e178.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"47649ed3-170d-4787-8340-7be1301bbd5d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-19DnxQa4AGcPJeh7Z_TJkqXRq9RsPQevHGqKzqkfSNupKFhpKnbYAAsdGj5r4"} {"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"47649ed3-170d-4787-8340-7be1301bbd5d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-19DnxQa4AGcPJeh7Z_TJkqXRq9RsPQevHGqKzqkfSNupKFhpKnbYAAsdGj5r4\"}"} {"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"47649ed3-170d-4787-8340-7be1301bbd5d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"87f9afb5-9d25-41d0-b6df-b2307245db55","keyName":"e2e-rate-a-0f66d5","subscription":"e2e-rate-iso-a-0f66d5","tenant":"e2e-shared-a-37e178","userId":"87f9afb5-9d25-41d0-b6df-b2307245db55","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"47649ed3-170d-4787-8340-7be1301bbd5d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178\",\"requestedSubscription\":\"e2e-rate-iso-a-0f66d5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"47649ed3-170d-4787-8340-7be1301bbd5d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-37e178.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-37e178","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0f66d5","namespace":"ai-tenant-e2e-shared-a-37e178","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"47649ed3-170d-4787-8340-7be1301bbd5d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47649ed3-170d-4787-8340-7be1301bbd5d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47649ed3-170d-4787-8340-7be1301bbd5d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47649ed3-170d-4787-8340-7be1301bbd5d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47649ed3-170d-4787-8340-7be1301bbd5d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47649ed3-170d-4787-8340-7be1301bbd5d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47649ed3-170d-4787-8340-7be1301bbd5d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47649ed3-170d-4787-8340-7be1301bbd5d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0f66d5"} {"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47649ed3-170d-4787-8340-7be1301bbd5d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"87f9afb5-9d25-41d0-b6df-b2307245db55","keyName":"e2e-rate-a-0f66d5","selected_subscription":"e2e-rate-iso-a-0f66d5","selected_subscription_key":"ai-tenant-e2e-shared-a-37e178/e2e-rate-iso-a-0f66d5@ai-tenant-e2e-shared-a-37e178/rate-test-model-37e178","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-37e178","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0f66d5","namespace":"ai-tenant-e2e-shared-a-37e178","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47649ed3-170d-4787-8340-7be1301bbd5d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47649ed3-170d-4787-8340-7be1301bbd5d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"846c119d-8a8d-49c2-babf-c4f3a10ef143","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:56122","PortSpecifier":{"PortValue":56122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"846c119d-8a8d-49c2-babf-c4f3a10ef143","method":"POST","path":"/ai-tenant-e2e-shared-b-67755c/rate-test-model-67755c/v1/completions","host":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"846c119d-8a8d-49c2-babf-c4f3a10ef143","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:56122","PortSpecifier":{"PortValue":56122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.44:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783370757,"nanos":286926451},"http":{"id":"846c119d-8a8d-49c2-babf-c4f3a10ef143","method":"POST","headers":{":authority":"e2e-shared-b-67755c.apps.8603da6d-0186-4073-9563-481d7ae742a7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-67755c/rate-test-model-67755c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"846c119d-8a8d-49c2-babf-c4f3a10ef143","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YpMpF8RCDiC57tVC_nlj2qkjgGlRRMZuVVANCeae39DUPKxE37GG117e9bku"} {"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"846c119d-8a8d-49c2-babf-c4f3a10ef143","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-67755c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YpMpF8RCDiC57tVC_nlj2qkjgGlRRMZuVVANCeae39DUPKxE37GG117e9bku\"}"} {"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"846c119d-8a8d-49c2-babf-c4f3a10ef143","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-67755c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0d50756c-7361-4a54-b77a-15aeaee9525b","keyName":"e2e-rate-b-0f66d5","subscription":"e2e-rate-iso-b-0f66d5","tenant":"e2e-shared-b-67755c","userId":"0d50756c-7361-4a54-b77a-15aeaee9525b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"846c119d-8a8d-49c2-babf-c4f3a10ef143","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-67755c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-67755c/rate-test-model-67755c\",\"requestedSubscription\":\"e2e-rate-iso-b-0f66d5\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"846c119d-8a8d-49c2-babf-c4f3a10ef143","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-67755c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-67755c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-0f66d5","namespace":"ai-tenant-e2e-shared-b-67755c","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"846c119d-8a8d-49c2-babf-c4f3a10ef143","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"846c119d-8a8d-49c2-babf-c4f3a10ef143","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"846c119d-8a8d-49c2-babf-c4f3a10ef143","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"846c119d-8a8d-49c2-babf-c4f3a10ef143","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-67755c/rate-test-model-67755c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"846c119d-8a8d-49c2-babf-c4f3a10ef143","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"846c119d-8a8d-49c2-babf-c4f3a10ef143","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"846c119d-8a8d-49c2-babf-c4f3a10ef143","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-0f66d5"} {"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"846c119d-8a8d-49c2-babf-c4f3a10ef143","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"846c119d-8a8d-49c2-babf-c4f3a10ef143","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"0d50756c-7361-4a54-b77a-15aeaee9525b","keyName":"e2e-rate-b-0f66d5","selected_subscription":"e2e-rate-iso-b-0f66d5","selected_subscription_key":"ai-tenant-e2e-shared-b-67755c/e2e-rate-iso-b-0f66d5@ai-tenant-e2e-shared-b-67755c/rate-test-model-67755c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-67755c","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-0f66d5","namespace":"ai-tenant-e2e-shared-b-67755c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"846c119d-8a8d-49c2-babf-c4f3a10ef143","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T20:45:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"846c119d-8a8d-49c2-babf-c4f3a10ef143","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T20:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57c1c5fe8f90038b1a6440d41fa40d981f5f67fa93815d2cae7154a1c89035d5"} {"level":"info","ts":"2026-07-06T20:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db836d9ef4963490729f3503a92711cb7861132d896f631d7a5ebb39ff9128d0"} {"level":"info","ts":"2026-07-06T20:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f17ea20dad0f15731108e49f5e0d328120be854f2f670d748df2b98624230ea5"} {"level":"info","ts":"2026-07-06T20:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97a911f001a6ed61c5ed4203801dd8e2e592e04a860cdeebc09f93e3988e25dc"} {"level":"info","ts":"2026-07-06T20:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/673d999ebc9d265d6bc8adf070dc0ce432723c35749b7d2eac8821653217efa9"} {"level":"info","ts":"2026-07-06T20:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/51fb72a4bb6028e99b2e3bbb5006cbf6602b2f7b6d7a872b5b1070ec5bc29c96"} {"level":"info","ts":"2026-07-06T20:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec04522e7c1924e9e7ed36d68c41476844ab91db0a1ca65443295f979acb12dc"} {"level":"info","ts":"2026-07-06T20:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58da53f1b8bee7531ad1cd81770fac2306a3ec727f8fa74d79bef61247fd65b4"} {"level":"info","ts":"2026-07-06T20:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e0931b89ec20f77fe2213e05830c13b893105ed9a9e2017195d9b266937246e"} {"level":"info","ts":"2026-07-06T20:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/74c432120d1906e7bd33e8f595937de815b4602dac5773b4765bcfaa9d0a4dbd"} {"level":"info","ts":"2026-07-06T20:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4420314387beec0b4555a7f8bf5ccbf4947ef3b3e031978ac13cbe4e4b0c4963"} {"level":"info","ts":"2026-07-06T20:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5b59734645bdf4a63639568aaf185d1b8bf5b87c9c86ca92a5642ef756f5d317"} {"level":"info","ts":"2026-07-06T20:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f09fb3bc6d0974bdaa151df85b0b0fb7aa64f9656839a96b2cf28de4a137d994"} {"level":"info","ts":"2026-07-06T20:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4de6a7ffc088c909c4ab1a9c3f7ca87982d038f390b3b1da1581449162a7266d"} {"level":"info","ts":"2026-07-06T20:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76406521609bd87bd5c89450e866e91757dfdef5a8f4b222e7ca677c42aca8c7"} {"level":"info","ts":"2026-07-06T20:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/adad2dad094428be60a4e3484f2a9b5c1960e1d8b4dab7fbaadff31ada844fde"} {"level":"info","ts":"2026-07-06T20:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8379e8eb9e8a5c6806513c136b9d3c8bf84dddf47321becfe099805b3a632376"} {"level":"info","ts":"2026-07-06T20:46:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f6ce7fa0660ee03bd8e9823a16bf311b14fa3f08c2da9e93bf95b7d6d083da39"} {"level":"info","ts":"2026-07-06T20:46:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7dc149239f705d21609e0d042b461383983e8fdb599cd9003df5ff1c0ef89e32"} {"level":"info","ts":"2026-07-06T20:46:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e959195fda58eca8d6ce44537354b279e44144547300d8481628cc172aa8bca7"}