--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-26T15:51:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3624955a-89a0-4ea2-ac70-2a6d6f1635b3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-111A4BOrvupz1GbiC_hXay6aUu681xLv1olOixmJKtQ6IfnMDKf6i4Ke9Jf6o"} {"level":"debug","ts":"2026-07-26T15:51:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3624955a-89a0-4ea2-ac70-2a6d6f1635b3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-60c814.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-111A4BOrvupz1GbiC_hXay6aUu681xLv1olOixmJKtQ6IfnMDKf6i4Ke9Jf6o\"}"} {"level":"debug","ts":"2026-07-26T15:51:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3624955a-89a0-4ea2-ac70-2a6d6f1635b3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-60c814.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-26T15:51:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3624955a-89a0-4ea2-ac70-2a6d6f1635b3","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-60c814.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:51:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"3624955a-89a0-4ea2-ac70-2a6d6f1635b3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-26T15:51:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3624955a-89a0-4ea2-ac70-2a6d6f1635b3","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-26T15:51:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3624955a-89a0-4ea2-ac70-2a6d6f1635b3","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"x-ext-auth-reason":""},{"content-type":"text/plain"}]}} {"level":"info","ts":"2026-07-26T15:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09"} {"level":"info","ts":"2026-07-26T15:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520"} {"level":"info","ts":"2026-07-26T15:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576"} {"level":"info","ts":"2026-07-26T15:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64f54b7c9147319d43c27e0af3d87622b0004628078131cc74c1ea2d4a532a87"} {"level":"info","ts":"2026-07-26T15:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"} {"level":"info","ts":"2026-07-26T15:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3284bc2af4c25b95653e9939c677f7704fe3f2b78925ce4f5fc3be503069f1dc"} {"level":"info","ts":"2026-07-26T15:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd"} {"level":"info","ts":"2026-07-26T15:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57"} {"level":"info","ts":"2026-07-26T15:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08a62a1a12f2096e406fe8c30037f93380599d4864d788e27dea0d420c9d711c"} {"level":"info","ts":"2026-07-26T15:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff"} {"level":"info","ts":"2026-07-26T15:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c"} {"level":"info","ts":"2026-07-26T15:51:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623"} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576"} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576"} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576"} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09"} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09"} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09"} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff"} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff"} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09"} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff"} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3284bc2af4c25b95653e9939c677f7704fe3f2b78925ce4f5fc3be503069f1dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3284bc2af4c25b95653e9939c677f7704fe3f2b78925ce4f5fc3be503069f1dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3284bc2af4c25b95653e9939c677f7704fe3f2b78925ce4f5fc3be503069f1dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3284bc2af4c25b95653e9939c677f7704fe3f2b78925ce4f5fc3be503069f1dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3284bc2af4c25b95653e9939c677f7704fe3f2b78925ce4f5fc3be503069f1dc"} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3284bc2af4c25b95653e9939c677f7704fe3f2b78925ce4f5fc3be503069f1dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3284bc2af4c25b95653e9939c677f7704fe3f2b78925ce4f5fc3be503069f1dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3284bc2af4c25b95653e9939c677f7704fe3f2b78925ce4f5fc3be503069f1dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3284bc2af4c25b95653e9939c677f7704fe3f2b78925ce4f5fc3be503069f1dc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3284bc2af4c25b95653e9939c677f7704fe3f2b78925ce4f5fc3be503069f1dc"} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64f54b7c9147319d43c27e0af3d87622b0004628078131cc74c1ea2d4a532a87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623"} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64f54b7c9147319d43c27e0af3d87622b0004628078131cc74c1ea2d4a532a87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64f54b7c9147319d43c27e0af3d87622b0004628078131cc74c1ea2d4a532a87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64f54b7c9147319d43c27e0af3d87622b0004628078131cc74c1ea2d4a532a87"} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64f54b7c9147319d43c27e0af3d87622b0004628078131cc74c1ea2d4a532a87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623"} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64f54b7c9147319d43c27e0af3d87622b0004628078131cc74c1ea2d4a532a87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64f54b7c9147319d43c27e0af3d87622b0004628078131cc74c1ea2d4a532a87"} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64f54b7c9147319d43c27e0af3d87622b0004628078131cc74c1ea2d4a532a87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64f54b7c9147319d43c27e0af3d87622b0004628078131cc74c1ea2d4a532a87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623"} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64f54b7c9147319d43c27e0af3d87622b0004628078131cc74c1ea2d4a532a87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64f54b7c9147319d43c27e0af3d87622b0004628078131cc74c1ea2d4a532a87","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623"} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64f54b7c9147319d43c27e0af3d87622b0004628078131cc74c1ea2d4a532a87"} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623"} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623"} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd"} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd"} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623"} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623"} {"level":"info","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd"} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:51:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57"} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57"} {"level":"debug","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623"} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57"} {"level":"debug","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520"} {"level":"debug","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520"} {"level":"debug","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08a62a1a12f2096e406fe8c30037f93380599d4864d788e27dea0d420c9d711c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520"} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08a62a1a12f2096e406fe8c30037f93380599d4864d788e27dea0d420c9d711c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08a62a1a12f2096e406fe8c30037f93380599d4864d788e27dea0d420c9d711c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08a62a1a12f2096e406fe8c30037f93380599d4864d788e27dea0d420c9d711c"} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08a62a1a12f2096e406fe8c30037f93380599d4864d788e27dea0d420c9d711c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08a62a1a12f2096e406fe8c30037f93380599d4864d788e27dea0d420c9d711c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08a62a1a12f2096e406fe8c30037f93380599d4864d788e27dea0d420c9d711c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520"} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08a62a1a12f2096e406fe8c30037f93380599d4864d788e27dea0d420c9d711c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08a62a1a12f2096e406fe8c30037f93380599d4864d788e27dea0d420c9d711c"} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08a62a1a12f2096e406fe8c30037f93380599d4864d788e27dea0d420c9d711c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520"} {"level":"debug","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08a62a1a12f2096e406fe8c30037f93380599d4864d788e27dea0d420c9d711c"} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520"} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c"} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520"} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c"} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520"} {"level":"error","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c"} {"level":"error","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c"} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520"} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c"} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c"} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:51:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c"} {"level":"error","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:51:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e006742-3fa4-4516-b1ea-fe66eeeca712","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41508","PortSpecifier":{"PortValue":41508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2e006742-3fa4-4516-b1ea-fe66eeeca712","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e006742-3fa4-4516-b1ea-fe66eeeca712","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41508","PortSpecifier":{"PortValue":41508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081101,"nanos":642617076},"http":{"id":"2e006742-3fa4-4516-b1ea-fe66eeeca712","method":"POST","headers":{":authority":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2e006742-3fa4-4516-b1ea-fe66eeeca712","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2e006742-3fa4-4516-b1ea-fe66eeeca712","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b176e956-e200-4ee7-9cdb-029b28c484d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2abb13a-f450-45d5-997e-e063425694e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/543c051bbd65"]}} {"level":"debug","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2e006742-3fa4-4516-b1ea-fe66eeeca712","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/543c051bbd65"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2abb13a-f450-45d5-997e-e063425694e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b176e956-e200-4ee7-9cdb-029b28c484d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d0b04d5a36f358c7448d5c15f4fca5594917b8e61b4781633cc35a79a1074487"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.74:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e006742-3fa4-4516-b1ea-fe66eeeca712","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e006742-3fa4-4516-b1ea-fe66eeeca712","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e006742-3fa4-4516-b1ea-fe66eeeca712","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a20d61/auth-test-model-a20d61\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a20d61/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2e006742-3fa4-4516-b1ea-fe66eeeca712","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e006742-3fa4-4516-b1ea-fe66eeeca712","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e006742-3fa4-4516-b1ea-fe66eeeca712","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e006742-3fa4-4516-b1ea-fe66eeeca712","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e006742-3fa4-4516-b1ea-fe66eeeca712","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a4b39aa-e69e-48ba-9e04-f611b1fb4343","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38386","PortSpecifier":{"PortValue":38386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4a4b39aa-e69e-48ba-9e04-f611b1fb4343","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-60c814.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a4b39aa-e69e-48ba-9e04-f611b1fb4343","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38386","PortSpecifier":{"PortValue":38386}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081101,"nanos":679488778},"http":{"id":"4a4b39aa-e69e-48ba-9e04-f611b1fb4343","method":"POST","headers":{":authority":"e2e-shared-b-60c814.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4a4b39aa-e69e-48ba-9e04-f611b1fb4343","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4a4b39aa-e69e-48ba-9e04-f611b1fb4343","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b176e956-e200-4ee7-9cdb-029b28c484d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2abb13a-f450-45d5-997e-e063425694e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/543c051bbd65"]}} {"level":"debug","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4a4b39aa-e69e-48ba-9e04-f611b1fb4343","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/543c051bbd65"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2abb13a-f450-45d5-997e-e063425694e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b176e956-e200-4ee7-9cdb-029b28c484d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-60c814.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a4b39aa-e69e-48ba-9e04-f611b1fb4343","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a4b39aa-e69e-48ba-9e04-f611b1fb4343","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a4b39aa-e69e-48ba-9e04-f611b1fb4343","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-60c814/auth-test-model-60c814\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-60c814/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4a4b39aa-e69e-48ba-9e04-f611b1fb4343","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a4b39aa-e69e-48ba-9e04-f611b1fb4343","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a4b39aa-e69e-48ba-9e04-f611b1fb4343","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a4b39aa-e69e-48ba-9e04-f611b1fb4343","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a4b39aa-e69e-48ba-9e04-f611b1fb4343","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9c8d9aa-060e-461d-a36f-bdef17416d59","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41522","PortSpecifier":{"PortValue":41522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e9c8d9aa-060e-461d-a36f-bdef17416d59","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9c8d9aa-060e-461d-a36f-bdef17416d59","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41522","PortSpecifier":{"PortValue":41522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081101,"nanos":724328794},"http":{"id":"e9c8d9aa-060e-461d-a36f-bdef17416d59","method":"POST","headers":{":authority":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e9c8d9aa-060e-461d-a36f-bdef17416d59","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e9c8d9aa-060e-461d-a36f-bdef17416d59","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b176e956-e200-4ee7-9cdb-029b28c484d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2abb13a-f450-45d5-997e-e063425694e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/543c051bbd65"]}} {"level":"debug","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e9c8d9aa-060e-461d-a36f-bdef17416d59","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/543c051bbd65"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2abb13a-f450-45d5-997e-e063425694e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b176e956-e200-4ee7-9cdb-029b28c484d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d0b04d5a36f358c7448d5c15f4fca5594917b8e61b4781633cc35a79a1074487"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.74:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9c8d9aa-060e-461d-a36f-bdef17416d59","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9c8d9aa-060e-461d-a36f-bdef17416d59","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9c8d9aa-060e-461d-a36f-bdef17416d59","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a20d61/auth-test-model-a20d61\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a20d61/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e9c8d9aa-060e-461d-a36f-bdef17416d59","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9c8d9aa-060e-461d-a36f-bdef17416d59","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9c8d9aa-060e-461d-a36f-bdef17416d59","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9c8d9aa-060e-461d-a36f-bdef17416d59","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9c8d9aa-060e-461d-a36f-bdef17416d59","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab676cf4-6d6b-4a24-91c6-8b6a1086f3b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38390","PortSpecifier":{"PortValue":38390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ab676cf4-6d6b-4a24-91c6-8b6a1086f3b0","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-60c814.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab676cf4-6d6b-4a24-91c6-8b6a1086f3b0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38390","PortSpecifier":{"PortValue":38390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081101,"nanos":762046195},"http":{"id":"ab676cf4-6d6b-4a24-91c6-8b6a1086f3b0","method":"POST","headers":{":authority":"e2e-shared-b-60c814.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ab676cf4-6d6b-4a24-91c6-8b6a1086f3b0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ab676cf4-6d6b-4a24-91c6-8b6a1086f3b0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b176e956-e200-4ee7-9cdb-029b28c484d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2abb13a-f450-45d5-997e-e063425694e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/543c051bbd65"]}} {"level":"debug","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ab676cf4-6d6b-4a24-91c6-8b6a1086f3b0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/543c051bbd65"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2abb13a-f450-45d5-997e-e063425694e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b176e956-e200-4ee7-9cdb-029b28c484d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-60c814.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab676cf4-6d6b-4a24-91c6-8b6a1086f3b0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab676cf4-6d6b-4a24-91c6-8b6a1086f3b0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab676cf4-6d6b-4a24-91c6-8b6a1086f3b0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-60c814/auth-test-model-60c814\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-60c814/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ab676cf4-6d6b-4a24-91c6-8b6a1086f3b0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab676cf4-6d6b-4a24-91c6-8b6a1086f3b0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab676cf4-6d6b-4a24-91c6-8b6a1086f3b0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab676cf4-6d6b-4a24-91c6-8b6a1086f3b0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T15:51:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab676cf4-6d6b-4a24-91c6-8b6a1086f3b0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T15:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520"} {"level":"info","ts":"2026-07-26T15:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3284bc2af4c25b95653e9939c677f7704fe3f2b78925ce4f5fc3be503069f1dc"} {"level":"info","ts":"2026-07-26T15:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08a62a1a12f2096e406fe8c30037f93380599d4864d788e27dea0d420c9d711c"} {"level":"info","ts":"2026-07-26T15:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c"} {"level":"info","ts":"2026-07-26T15:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff"} {"level":"info","ts":"2026-07-26T15:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623"} {"level":"info","ts":"2026-07-26T15:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57"} {"level":"info","ts":"2026-07-26T15:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64f54b7c9147319d43c27e0af3d87622b0004628078131cc74c1ea2d4a532a87"} {"level":"info","ts":"2026-07-26T15:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576"} {"level":"info","ts":"2026-07-26T15:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"} {"level":"info","ts":"2026-07-26T15:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd"} {"level":"info","ts":"2026-07-26T15:51:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09"} {"level":"debug","ts":"2026-07-26T15:52:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576"} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576"} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576"} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576"} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576"} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520"} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576"} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520"} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576"} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520"} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576"} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd"} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520"} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576"} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd"} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520"} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576"} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09"} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd"} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576"} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09"} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd"} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576"} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09"} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd"} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09"} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623"} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd"} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09"} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623"} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd"} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623"} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd"} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3284bc2af4c25b95653e9939c677f7704fe3f2b78925ce4f5fc3be503069f1dc"} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623"} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd"} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57"} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3284bc2af4c25b95653e9939c677f7704fe3f2b78925ce4f5fc3be503069f1dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3284bc2af4c25b95653e9939c677f7704fe3f2b78925ce4f5fc3be503069f1dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"} {"level":"info","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3284bc2af4c25b95653e9939c677f7704fe3f2b78925ce4f5fc3be503069f1dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3284bc2af4c25b95653e9939c677f7704fe3f2b78925ce4f5fc3be503069f1dc"} {"level":"info","ts":"2026-07-26T15:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3284bc2af4c25b95653e9939c677f7704fe3f2b78925ce4f5fc3be503069f1dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff"} {"level":"info","ts":"2026-07-26T15:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57"} {"level":"info","ts":"2026-07-26T15:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff"} {"level":"info","ts":"2026-07-26T15:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64f54b7c9147319d43c27e0af3d87622b0004628078131cc74c1ea2d4a532a87"} {"level":"info","ts":"2026-07-26T15:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08a62a1a12f2096e406fe8c30037f93380599d4864d788e27dea0d420c9d711c"} {"level":"info","ts":"2026-07-26T15:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c"} {"level":"info","ts":"2026-07-26T15:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64f54b7c9147319d43c27e0af3d87622b0004628078131cc74c1ea2d4a532a87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64f54b7c9147319d43c27e0af3d87622b0004628078131cc74c1ea2d4a532a87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57"} {"level":"info","ts":"2026-07-26T15:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff"} {"level":"info","ts":"2026-07-26T15:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64f54b7c9147319d43c27e0af3d87622b0004628078131cc74c1ea2d4a532a87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08a62a1a12f2096e406fe8c30037f93380599d4864d788e27dea0d420c9d711c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08a62a1a12f2096e406fe8c30037f93380599d4864d788e27dea0d420c9d711c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64f54b7c9147319d43c27e0af3d87622b0004628078131cc74c1ea2d4a532a87"} {"level":"info","ts":"2026-07-26T15:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08a62a1a12f2096e406fe8c30037f93380599d4864d788e27dea0d420c9d711c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08a62a1a12f2096e406fe8c30037f93380599d4864d788e27dea0d420c9d711c"} {"level":"info","ts":"2026-07-26T15:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c"} {"level":"info","ts":"2026-07-26T15:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64f54b7c9147319d43c27e0af3d87622b0004628078131cc74c1ea2d4a532a87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08a62a1a12f2096e406fe8c30037f93380599d4864d788e27dea0d420c9d711c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57"} {"level":"info","ts":"2026-07-26T15:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57"} {"level":"info","ts":"2026-07-26T15:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57"} {"level":"error","ts":"2026-07-26T15:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T15:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"440fdde3-7677-4054-849b-02f180cff632","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59354","PortSpecifier":{"PortValue":59354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"440fdde3-7677-4054-849b-02f180cff632","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"440fdde3-7677-4054-849b-02f180cff632","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59354","PortSpecifier":{"PortValue":59354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081146,"nanos":840534878},"http":{"id":"440fdde3-7677-4054-849b-02f180cff632","method":"POST","headers":{":authority":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"440fdde3-7677-4054-849b-02f180cff632","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"440fdde3-7677-4054-849b-02f180cff632","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b176e956-e200-4ee7-9cdb-029b28c484d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2abb13a-f450-45d5-997e-e063425694e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/543c051bbd65"]}} {"level":"debug","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"440fdde3-7677-4054-849b-02f180cff632","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/543c051bbd65"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2abb13a-f450-45d5-997e-e063425694e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b176e956-e200-4ee7-9cdb-029b28c484d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d0b04d5a36f358c7448d5c15f4fca5594917b8e61b4781633cc35a79a1074487"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.74:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"440fdde3-7677-4054-849b-02f180cff632","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"440fdde3-7677-4054-849b-02f180cff632","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"440fdde3-7677-4054-849b-02f180cff632","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a20d61/auth-test-model-a20d61\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a20d61/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"440fdde3-7677-4054-849b-02f180cff632","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"440fdde3-7677-4054-849b-02f180cff632","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"440fdde3-7677-4054-849b-02f180cff632","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"440fdde3-7677-4054-849b-02f180cff632","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"440fdde3-7677-4054-849b-02f180cff632","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1f40ed6-c8cc-4984-9572-9306bfb9881b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36696","PortSpecifier":{"PortValue":36696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b1f40ed6-c8cc-4984-9572-9306bfb9881b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-60c814.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1f40ed6-c8cc-4984-9572-9306bfb9881b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36696","PortSpecifier":{"PortValue":36696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081146,"nanos":879444955},"http":{"id":"b1f40ed6-c8cc-4984-9572-9306bfb9881b","method":"POST","headers":{":authority":"e2e-shared-b-60c814.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b1f40ed6-c8cc-4984-9572-9306bfb9881b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b1f40ed6-c8cc-4984-9572-9306bfb9881b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b176e956-e200-4ee7-9cdb-029b28c484d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2abb13a-f450-45d5-997e-e063425694e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/543c051bbd65"]}} {"level":"debug","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b1f40ed6-c8cc-4984-9572-9306bfb9881b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/543c051bbd65"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2abb13a-f450-45d5-997e-e063425694e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b176e956-e200-4ee7-9cdb-029b28c484d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-60c814.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1f40ed6-c8cc-4984-9572-9306bfb9881b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1f40ed6-c8cc-4984-9572-9306bfb9881b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1f40ed6-c8cc-4984-9572-9306bfb9881b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-60c814/auth-test-model-60c814\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-60c814/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b1f40ed6-c8cc-4984-9572-9306bfb9881b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1f40ed6-c8cc-4984-9572-9306bfb9881b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1f40ed6-c8cc-4984-9572-9306bfb9881b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1f40ed6-c8cc-4984-9572-9306bfb9881b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1f40ed6-c8cc-4984-9572-9306bfb9881b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2bd1b079-9611-420e-8a92-4ac550c50486","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36706","PortSpecifier":{"PortValue":36706}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2bd1b079-9611-420e-8a92-4ac550c50486","method":"GET","path":"/maas-api/v1/api-keys/82269678-5f3a-461b-829e-5080a0d40a85","host":"e2e-shared-b-60c814.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2bd1b079-9611-420e-8a92-4ac550c50486","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:36706","PortSpecifier":{"PortValue":36706}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081146,"nanos":917077867},"http":{"id":"2bd1b079-9611-420e-8a92-4ac550c50486","method":"GET","headers":{":authority":"e2e-shared-b-60c814.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/82269678-5f3a-461b-829e-5080a0d40a85",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2bd1b079-9611-420e-8a92-4ac550c50486","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2bd1b079-9611-420e-8a92-4ac550c50486","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b176e956-e200-4ee7-9cdb-029b28c484d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2abb13a-f450-45d5-997e-e063425694e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/543c051bbd65"]}} {"level":"debug","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2bd1b079-9611-420e-8a92-4ac550c50486","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/543c051bbd65"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2abb13a-f450-45d5-997e-e063425694e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b176e956-e200-4ee7-9cdb-029b28c484d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-60c814.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/82269678-5f3a-461b-829e-5080a0d40a85",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2bd1b079-9611-420e-8a92-4ac550c50486","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2bd1b079-9611-420e-8a92-4ac550c50486","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2bd1b079-9611-420e-8a92-4ac550c50486","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-60c814/auth-test-model-60c814\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-60c814/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2bd1b079-9611-420e-8a92-4ac550c50486","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2bd1b079-9611-420e-8a92-4ac550c50486","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2bd1b079-9611-420e-8a92-4ac550c50486","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2bd1b079-9611-420e-8a92-4ac550c50486","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2bd1b079-9611-420e-8a92-4ac550c50486","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"702cf7c6-9d46-46c9-ad42-bb389764e564","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59362","PortSpecifier":{"PortValue":59362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"702cf7c6-9d46-46c9-ad42-bb389764e564","method":"GET","path":"/maas-api/v1/api-keys/82269678-5f3a-461b-829e-5080a0d40a85","host":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"702cf7c6-9d46-46c9-ad42-bb389764e564","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:59362","PortSpecifier":{"PortValue":59362}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081146,"nanos":950534365},"http":{"id":"702cf7c6-9d46-46c9-ad42-bb389764e564","method":"GET","headers":{":authority":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/82269678-5f3a-461b-829e-5080a0d40a85",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"702cf7c6-9d46-46c9-ad42-bb389764e564","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"702cf7c6-9d46-46c9-ad42-bb389764e564","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b176e956-e200-4ee7-9cdb-029b28c484d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2abb13a-f450-45d5-997e-e063425694e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/543c051bbd65"]}} {"level":"debug","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"702cf7c6-9d46-46c9-ad42-bb389764e564","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/543c051bbd65"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2abb13a-f450-45d5-997e-e063425694e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b176e956-e200-4ee7-9cdb-029b28c484d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d0b04d5a36f358c7448d5c15f4fca5594917b8e61b4781633cc35a79a1074487"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.74:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/82269678-5f3a-461b-829e-5080a0d40a85",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"702cf7c6-9d46-46c9-ad42-bb389764e564","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"702cf7c6-9d46-46c9-ad42-bb389764e564","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"702cf7c6-9d46-46c9-ad42-bb389764e564","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a20d61/auth-test-model-a20d61\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a20d61/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"702cf7c6-9d46-46c9-ad42-bb389764e564","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"702cf7c6-9d46-46c9-ad42-bb389764e564","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"702cf7c6-9d46-46c9-ad42-bb389764e564","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"702cf7c6-9d46-46c9-ad42-bb389764e564","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T15:52:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"702cf7c6-9d46-46c9-ad42-bb389764e564","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T15:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd"} {"level":"info","ts":"2026-07-26T15:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576"} {"level":"info","ts":"2026-07-26T15:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff"} {"level":"info","ts":"2026-07-26T15:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08a62a1a12f2096e406fe8c30037f93380599d4864d788e27dea0d420c9d711c"} {"level":"info","ts":"2026-07-26T15:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57"} {"level":"info","ts":"2026-07-26T15:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623"} {"level":"info","ts":"2026-07-26T15:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c"} {"level":"info","ts":"2026-07-26T15:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64f54b7c9147319d43c27e0af3d87622b0004628078131cc74c1ea2d4a532a87"} {"level":"info","ts":"2026-07-26T15:52:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520"} {"level":"info","ts":"2026-07-26T15:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09"} {"level":"info","ts":"2026-07-26T15:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"} {"level":"info","ts":"2026-07-26T15:52:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3284bc2af4c25b95653e9939c677f7704fe3f2b78925ce4f5fc3be503069f1dc"} {"level":"debug","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd"} {"level":"debug","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd"} {"level":"debug","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd"} {"level":"debug","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd"} {"level":"debug","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd"} {"level":"info","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576"} {"level":"debug","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd"} {"level":"info","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576"} {"level":"info","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd"} {"level":"info","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd"} {"level":"debug","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576"} {"level":"info","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd"} {"level":"debug","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd"} {"level":"info","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd"} {"level":"debug","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd"} {"level":"info","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"} {"level":"debug","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"} {"level":"info","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd"} {"level":"debug","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520"} {"level":"info","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520"} {"level":"info","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520"} {"level":"debug","ts":"2026-07-26T15:52:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08a62a1a12f2096e406fe8c30037f93380599d4864d788e27dea0d420c9d711c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08a62a1a12f2096e406fe8c30037f93380599d4864d788e27dea0d420c9d711c"} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08a62a1a12f2096e406fe8c30037f93380599d4864d788e27dea0d420c9d711c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08a62a1a12f2096e406fe8c30037f93380599d4864d788e27dea0d420c9d711c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08a62a1a12f2096e406fe8c30037f93380599d4864d788e27dea0d420c9d711c"} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08a62a1a12f2096e406fe8c30037f93380599d4864d788e27dea0d420c9d711c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08a62a1a12f2096e406fe8c30037f93380599d4864d788e27dea0d420c9d711c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520"} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08a62a1a12f2096e406fe8c30037f93380599d4864d788e27dea0d420c9d711c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08a62a1a12f2096e406fe8c30037f93380599d4864d788e27dea0d420c9d711c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08a62a1a12f2096e406fe8c30037f93380599d4864d788e27dea0d420c9d711c"} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08a62a1a12f2096e406fe8c30037f93380599d4864d788e27dea0d420c9d711c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08a62a1a12f2096e406fe8c30037f93380599d4864d788e27dea0d420c9d711c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08a62a1a12f2096e406fe8c30037f93380599d4864d788e27dea0d420c9d711c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08a62a1a12f2096e406fe8c30037f93380599d4864d788e27dea0d420c9d711c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64f54b7c9147319d43c27e0af3d87622b0004628078131cc74c1ea2d4a532a87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08a62a1a12f2096e406fe8c30037f93380599d4864d788e27dea0d420c9d711c"} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64f54b7c9147319d43c27e0af3d87622b0004628078131cc74c1ea2d4a532a87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08a62a1a12f2096e406fe8c30037f93380599d4864d788e27dea0d420c9d711c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64f54b7c9147319d43c27e0af3d87622b0004628078131cc74c1ea2d4a532a87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64f54b7c9147319d43c27e0af3d87622b0004628078131cc74c1ea2d4a532a87"} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64f54b7c9147319d43c27e0af3d87622b0004628078131cc74c1ea2d4a532a87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64f54b7c9147319d43c27e0af3d87622b0004628078131cc74c1ea2d4a532a87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64f54b7c9147319d43c27e0af3d87622b0004628078131cc74c1ea2d4a532a87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08a62a1a12f2096e406fe8c30037f93380599d4864d788e27dea0d420c9d711c"} {"level":"error","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"64f54b7c9147319d43c27e0af3d87622b0004628078131cc74c1ea2d4a532a87","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"64f54b7c9147319d43c27e0af3d87622b0004628078131cc74c1ea2d4a532a87\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64f54b7c9147319d43c27e0af3d87622b0004628078131cc74c1ea2d4a532a87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64f54b7c9147319d43c27e0af3d87622b0004628078131cc74c1ea2d4a532a87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64f54b7c9147319d43c27e0af3d87622b0004628078131cc74c1ea2d4a532a87"} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64f54b7c9147319d43c27e0af3d87622b0004628078131cc74c1ea2d4a532a87","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["64f54b7c9147319d43c27e0af3d87622b0004628078131cc74c1ea2d4a532a87"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623"} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64f54b7c9147319d43c27e0af3d87622b0004628078131cc74c1ea2d4a532a87","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64f54b7c9147319d43c27e0af3d87622b0004628078131cc74c1ea2d4a532a87","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623"} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64f54b7c9147319d43c27e0af3d87622b0004628078131cc74c1ea2d4a532a87"} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57"} {"level":"error","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57"} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623"} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3284bc2af4c25b95653e9939c677f7704fe3f2b78925ce4f5fc3be503069f1dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3284bc2af4c25b95653e9939c677f7704fe3f2b78925ce4f5fc3be503069f1dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3284bc2af4c25b95653e9939c677f7704fe3f2b78925ce4f5fc3be503069f1dc"} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3284bc2af4c25b95653e9939c677f7704fe3f2b78925ce4f5fc3be503069f1dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3284bc2af4c25b95653e9939c677f7704fe3f2b78925ce4f5fc3be503069f1dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3284bc2af4c25b95653e9939c677f7704fe3f2b78925ce4f5fc3be503069f1dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c"} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3284bc2af4c25b95653e9939c677f7704fe3f2b78925ce4f5fc3be503069f1dc"} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3284bc2af4c25b95653e9939c677f7704fe3f2b78925ce4f5fc3be503069f1dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09"} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c"} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57"} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3284bc2af4c25b95653e9939c677f7704fe3f2b78925ce4f5fc3be503069f1dc"} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09"} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff"} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c"} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff"} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff"} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff"} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:52:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:52:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff"} {"level":"info","ts":"2026-07-26T15:53:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e9fa7c9-8857-4539-9306-73c2b03d93b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44750","PortSpecifier":{"PortValue":44750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4e9fa7c9-8857-4539-9306-73c2b03d93b3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T15:53:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e9fa7c9-8857-4539-9306-73c2b03d93b3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44750","PortSpecifier":{"PortValue":44750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081187,"nanos":762428679},"http":{"id":"4e9fa7c9-8857-4539-9306-73c2b03d93b3","method":"POST","headers":{":authority":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:53:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4e9fa7c9-8857-4539-9306-73c2b03d93b3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T15:53:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4e9fa7c9-8857-4539-9306-73c2b03d93b3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b176e956-e200-4ee7-9cdb-029b28c484d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2abb13a-f450-45d5-997e-e063425694e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/543c051bbd65"]}} {"level":"debug","ts":"2026-07-26T15:53:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4e9fa7c9-8857-4539-9306-73c2b03d93b3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/543c051bbd65"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2abb13a-f450-45d5-997e-e063425694e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b176e956-e200-4ee7-9cdb-029b28c484d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d0b04d5a36f358c7448d5c15f4fca5594917b8e61b4781633cc35a79a1074487"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.74:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:53:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e9fa7c9-8857-4539-9306-73c2b03d93b3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:53:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e9fa7c9-8857-4539-9306-73c2b03d93b3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:53:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e9fa7c9-8857-4539-9306-73c2b03d93b3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a20d61/auth-test-model-a20d61\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a20d61/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:53:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4e9fa7c9-8857-4539-9306-73c2b03d93b3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T15:53:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e9fa7c9-8857-4539-9306-73c2b03d93b3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T15:53:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e9fa7c9-8857-4539-9306-73c2b03d93b3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-26T15:53:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e9fa7c9-8857-4539-9306-73c2b03d93b3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T15:53:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e9fa7c9-8857-4539-9306-73c2b03d93b3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T15:53:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50fe6838-46ee-4d46-a2b3-1fc753dc8185","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37686","PortSpecifier":{"PortValue":37686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"50fe6838-46ee-4d46-a2b3-1fc753dc8185","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-60c814.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T15:53:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"50fe6838-46ee-4d46-a2b3-1fc753dc8185","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:37686","PortSpecifier":{"PortValue":37686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081187,"nanos":801088006},"http":{"id":"50fe6838-46ee-4d46-a2b3-1fc753dc8185","method":"POST","headers":{":authority":"e2e-shared-b-60c814.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:53:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"50fe6838-46ee-4d46-a2b3-1fc753dc8185","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T15:53:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"50fe6838-46ee-4d46-a2b3-1fc753dc8185","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b176e956-e200-4ee7-9cdb-029b28c484d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2abb13a-f450-45d5-997e-e063425694e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/543c051bbd65"]}} {"level":"debug","ts":"2026-07-26T15:53:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"50fe6838-46ee-4d46-a2b3-1fc753dc8185","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/543c051bbd65"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2abb13a-f450-45d5-997e-e063425694e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b176e956-e200-4ee7-9cdb-029b28c484d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-60c814.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:53:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50fe6838-46ee-4d46-a2b3-1fc753dc8185","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:53:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50fe6838-46ee-4d46-a2b3-1fc753dc8185","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:53:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"50fe6838-46ee-4d46-a2b3-1fc753dc8185","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-60c814/auth-test-model-60c814\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-60c814/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:53:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"50fe6838-46ee-4d46-a2b3-1fc753dc8185","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T15:53:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50fe6838-46ee-4d46-a2b3-1fc753dc8185","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T15:53:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"50fe6838-46ee-4d46-a2b3-1fc753dc8185","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T15:53:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50fe6838-46ee-4d46-a2b3-1fc753dc8185","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T15:53:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"50fe6838-46ee-4d46-a2b3-1fc753dc8185","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T15:53:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de6f5bc2-bdea-4e27-b7e6-4dc5f2d17cf0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44752","PortSpecifier":{"PortValue":44752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"de6f5bc2-bdea-4e27-b7e6-4dc5f2d17cf0","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T15:53:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de6f5bc2-bdea-4e27-b7e6-4dc5f2d17cf0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44752","PortSpecifier":{"PortValue":44752}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081187,"nanos":840861925},"http":{"id":"de6f5bc2-bdea-4e27-b7e6-4dc5f2d17cf0","method":"POST","headers":{":authority":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:53:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"de6f5bc2-bdea-4e27-b7e6-4dc5f2d17cf0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-mmVktIqZfjlVMgxp_fe9C1P15jwRzjKpc9JVyAflj7CPtaq1xt9bAkZoG44t"} {"level":"debug","ts":"2026-07-26T15:53:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"de6f5bc2-bdea-4e27-b7e6-4dc5f2d17cf0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a20d61.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-mmVktIqZfjlVMgxp_fe9C1P15jwRzjKpc9JVyAflj7CPtaq1xt9bAkZoG44t\"}"} {"level":"debug","ts":"2026-07-26T15:53:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"de6f5bc2-bdea-4e27-b7e6-4dc5f2d17cf0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a20d61.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"7436756e-f277-4a2c-9b05-0e342ad87087","keyName":"e2e-auth-iso-a-4a6d12","subscription":"e2e-auth-iso-b09a6f","tenant":"e2e-shared-a-a20d61","userId":"7436756e-f277-4a2c-9b05-0e342ad87087","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T15:53:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"de6f5bc2-bdea-4e27-b7e6-4dc5f2d17cf0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:53:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de6f5bc2-bdea-4e27-b7e6-4dc5f2d17cf0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:53:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de6f5bc2-bdea-4e27-b7e6-4dc5f2d17cf0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:53:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de6f5bc2-bdea-4e27-b7e6-4dc5f2d17cf0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a20d61/auth-test-model-a20d61\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a20d61/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:53:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"de6f5bc2-bdea-4e27-b7e6-4dc5f2d17cf0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-26T15:53:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de6f5bc2-bdea-4e27-b7e6-4dc5f2d17cf0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T15:53:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de6f5bc2-bdea-4e27-b7e6-4dc5f2d17cf0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-b09a6f"} {"level":"debug","ts":"2026-07-26T15:53:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de6f5bc2-bdea-4e27-b7e6-4dc5f2d17cf0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T15:53:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de6f5bc2-bdea-4e27-b7e6-4dc5f2d17cf0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T15:53:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de6f5bc2-bdea-4e27-b7e6-4dc5f2d17cf0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T15:53:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec2f76c5ad0ea795d0c28a10e598d5466d7de446b36e466be2df8ca2c2352d09"} {"level":"info","ts":"2026-07-26T15:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff7898642fa3ec43d7b2d1b5f31c70ceb0199d52621d675bf46df8a100f4d92f"} {"level":"info","ts":"2026-07-26T15:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3fd36806abd24a96012e1a90562b6737d6e2790a0749e8def0aa3ffc9156504b"} {"level":"info","ts":"2026-07-26T15:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff"} {"level":"info","ts":"2026-07-26T15:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/abe85e3c0c09f0cd140fdd3980e09d1eea5a8883db7e1c1447a41a7ad2ce85bc"} {"level":"info","ts":"2026-07-26T15:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c"} {"level":"info","ts":"2026-07-26T15:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e9ad15e3e783328c53fb48dc463dfd011863e3cad00d0435686349ef6c0e2e2"} {"level":"info","ts":"2026-07-26T15:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/159447f80b87504e7b16b689513351174193ba106d88bfc39c1368972821dfb5"} {"level":"info","ts":"2026-07-26T15:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d10b9aade7baafcfdb728b0aba690244bbd6007674d57065baf5bf036d0774bd"} {"level":"info","ts":"2026-07-26T15:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15801c4285e7a9a8f03d859b2c1c9deb071239f6f68508f637d9f3201678e520"} {"level":"info","ts":"2026-07-26T15:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d22108957ecb5030ab64980e0f13da1f64276d7d5d92cf301ab191ad1c0c623"} {"level":"info","ts":"2026-07-26T15:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/64f54b7c9147319d43c27e0af3d87622b0004628078131cc74c1ea2d4a532a87"} {"level":"info","ts":"2026-07-26T15:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d49f1dede69a376af13b2bfce80277f03ffa9bd0e545aa1faa8086426b50d9f6"} {"level":"info","ts":"2026-07-26T15:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08a62a1a12f2096e406fe8c30037f93380599d4864d788e27dea0d420c9d711c"} {"level":"info","ts":"2026-07-26T15:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260"} {"level":"info","ts":"2026-07-26T15:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b24432e90518210f61bedd54cc85533e859718928d0f0a808ebecdaf828916ac"} {"level":"info","ts":"2026-07-26T15:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed88cbe8b4b61aa30f932c7e6bebe3b6a57fb6dd49c979fe06d3671cf1198576"} {"level":"info","ts":"2026-07-26T15:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9749f765a0583b13ea9785650db6bc1b816804a2de8e0f79282d8ac4807a0283"} {"level":"info","ts":"2026-07-26T15:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/300df159b8ab840849c982f7d1c45434f78e3d4f76e972e27d104c9026e767e0"} {"level":"info","ts":"2026-07-26T15:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/23b3b465e15b0aa05efa85f2a39fbb6da70ad1ae0d99e9143038463d4d24fc57"} {"level":"info","ts":"2026-07-26T15:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0b04d5a36f358c7448d5c15f4fca5594917b8e61b4781633cc35a79a1074487"} {"level":"info","ts":"2026-07-26T15:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39b1e0d4e1037be27d2a7ca58b8911c937efdac61180c537230d5edfd93244cb"} {"level":"info","ts":"2026-07-26T15:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"} {"level":"info","ts":"2026-07-26T15:53:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3284bc2af4c25b95653e9939c677f7704fe3f2b78925ce4f5fc3be503069f1dc"} {"level":"debug","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62a0bc8a96dfb411c581c3c3d5d97dc8681e95ef0fd418c3b8f707de37d8871e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62a0bc8a96dfb411c581c3c3d5d97dc8681e95ef0fd418c3b8f707de37d8871e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62a0bc8a96dfb411c581c3c3d5d97dc8681e95ef0fd418c3b8f707de37d8871e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62a0bc8a96dfb411c581c3c3d5d97dc8681e95ef0fd418c3b8f707de37d8871e"} {"level":"debug","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62a0bc8a96dfb411c581c3c3d5d97dc8681e95ef0fd418c3b8f707de37d8871e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62a0bc8a96dfb411c581c3c3d5d97dc8681e95ef0fd418c3b8f707de37d8871e"} {"level":"debug","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62a0bc8a96dfb411c581c3c3d5d97dc8681e95ef0fd418c3b8f707de37d8871e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62a0bc8a96dfb411c581c3c3d5d97dc8681e95ef0fd418c3b8f707de37d8871e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62a0bc8a96dfb411c581c3c3d5d97dc8681e95ef0fd418c3b8f707de37d8871e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62a0bc8a96dfb411c581c3c3d5d97dc8681e95ef0fd418c3b8f707de37d8871e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62a0bc8a96dfb411c581c3c3d5d97dc8681e95ef0fd418c3b8f707de37d8871e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62a0bc8a96dfb411c581c3c3d5d97dc8681e95ef0fd418c3b8f707de37d8871e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62a0bc8a96dfb411c581c3c3d5d97dc8681e95ef0fd418c3b8f707de37d8871e"} {"level":"debug","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62a0bc8a96dfb411c581c3c3d5d97dc8681e95ef0fd418c3b8f707de37d8871e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62a0bc8a96dfb411c581c3c3d5d97dc8681e95ef0fd418c3b8f707de37d8871e"} {"level":"debug","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62a0bc8a96dfb411c581c3c3d5d97dc8681e95ef0fd418c3b8f707de37d8871e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62a0bc8a96dfb411c581c3c3d5d97dc8681e95ef0fd418c3b8f707de37d8871e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62a0bc8a96dfb411c581c3c3d5d97dc8681e95ef0fd418c3b8f707de37d8871e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62a0bc8a96dfb411c581c3c3d5d97dc8681e95ef0fd418c3b8f707de37d8871e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62a0bc8a96dfb411c581c3c3d5d97dc8681e95ef0fd418c3b8f707de37d8871e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62a0bc8a96dfb411c581c3c3d5d97dc8681e95ef0fd418c3b8f707de37d8871e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62a0bc8a96dfb411c581c3c3d5d97dc8681e95ef0fd418c3b8f707de37d8871e"} {"level":"debug","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62a0bc8a96dfb411c581c3c3d5d97dc8681e95ef0fd418c3b8f707de37d8871e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62a0bc8a96dfb411c581c3c3d5d97dc8681e95ef0fd418c3b8f707de37d8871e"} {"level":"debug","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62a0bc8a96dfb411c581c3c3d5d97dc8681e95ef0fd418c3b8f707de37d8871e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62a0bc8a96dfb411c581c3c3d5d97dc8681e95ef0fd418c3b8f707de37d8871e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62a0bc8a96dfb411c581c3c3d5d97dc8681e95ef0fd418c3b8f707de37d8871e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62a0bc8a96dfb411c581c3c3d5d97dc8681e95ef0fd418c3b8f707de37d8871e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62a0bc8a96dfb411c581c3c3d5d97dc8681e95ef0fd418c3b8f707de37d8871e"} {"level":"debug","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eba7263925be6251a54e4efe224930e37ec3dfc59cd17f8a15ac3204a5b13a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eba7263925be6251a54e4efe224930e37ec3dfc59cd17f8a15ac3204a5b13a7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eba7263925be6251a54e4efe224930e37ec3dfc59cd17f8a15ac3204a5b13a7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eba7263925be6251a54e4efe224930e37ec3dfc59cd17f8a15ac3204a5b13a7d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eba7263925be6251a54e4efe224930e37ec3dfc59cd17f8a15ac3204a5b13a7d"} {"level":"debug","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eba7263925be6251a54e4efe224930e37ec3dfc59cd17f8a15ac3204a5b13a7d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eba7263925be6251a54e4efe224930e37ec3dfc59cd17f8a15ac3204a5b13a7d"} {"level":"debug","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eba7263925be6251a54e4efe224930e37ec3dfc59cd17f8a15ac3204a5b13a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eba7263925be6251a54e4efe224930e37ec3dfc59cd17f8a15ac3204a5b13a7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eba7263925be6251a54e4efe224930e37ec3dfc59cd17f8a15ac3204a5b13a7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eba7263925be6251a54e4efe224930e37ec3dfc59cd17f8a15ac3204a5b13a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eba7263925be6251a54e4efe224930e37ec3dfc59cd17f8a15ac3204a5b13a7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eba7263925be6251a54e4efe224930e37ec3dfc59cd17f8a15ac3204a5b13a7d"} {"level":"info","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eba7263925be6251a54e4efe224930e37ec3dfc59cd17f8a15ac3204a5b13a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eba7263925be6251a54e4efe224930e37ec3dfc59cd17f8a15ac3204a5b13a7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"} {"level":"info","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eba7263925be6251a54e4efe224930e37ec3dfc59cd17f8a15ac3204a5b13a7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eba7263925be6251a54e4efe224930e37ec3dfc59cd17f8a15ac3204a5b13a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eba7263925be6251a54e4efe224930e37ec3dfc59cd17f8a15ac3204a5b13a7d"} {"level":"info","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eba7263925be6251a54e4efe224930e37ec3dfc59cd17f8a15ac3204a5b13a7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"} {"level":"info","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eba7263925be6251a54e4efe224930e37ec3dfc59cd17f8a15ac3204a5b13a7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eba7263925be6251a54e4efe224930e37ec3dfc59cd17f8a15ac3204a5b13a7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eba7263925be6251a54e4efe224930e37ec3dfc59cd17f8a15ac3204a5b13a7d"} {"level":"error","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"} {"level":"error","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eba7263925be6251a54e4efe224930e37ec3dfc59cd17f8a15ac3204a5b13a7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eba7263925be6251a54e4efe224930e37ec3dfc59cd17f8a15ac3204a5b13a7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eba7263925be6251a54e4efe224930e37ec3dfc59cd17f8a15ac3204a5b13a7d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"} {"level":"debug","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eba7263925be6251a54e4efe224930e37ec3dfc59cd17f8a15ac3204a5b13a7d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eba7263925be6251a54e4efe224930e37ec3dfc59cd17f8a15ac3204a5b13a7d"} {"level":"debug","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"} {"level":"debug","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260"} {"level":"info","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"} {"level":"info","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260"} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260"} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260"} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f48455cda8b816b3f565000c507d4a0471fd4a417893b4b4126c5f12652d44f8"} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f48455cda8b816b3f565000c507d4a0471fd4a417893b4b4126c5f12652d44f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f48455cda8b816b3f565000c507d4a0471fd4a417893b4b4126c5f12652d44f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f48455cda8b816b3f565000c507d4a0471fd4a417893b4b4126c5f12652d44f8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260"} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f48455cda8b816b3f565000c507d4a0471fd4a417893b4b4126c5f12652d44f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f48455cda8b816b3f565000c507d4a0471fd4a417893b4b4126c5f12652d44f8"} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f48455cda8b816b3f565000c507d4a0471fd4a417893b4b4126c5f12652d44f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f48455cda8b816b3f565000c507d4a0471fd4a417893b4b4126c5f12652d44f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f48455cda8b816b3f565000c507d4a0471fd4a417893b4b4126c5f12652d44f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f48455cda8b816b3f565000c507d4a0471fd4a417893b4b4126c5f12652d44f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260"} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f48455cda8b816b3f565000c507d4a0471fd4a417893b4b4126c5f12652d44f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f48455cda8b816b3f565000c507d4a0471fd4a417893b4b4126c5f12652d44f8"} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f48455cda8b816b3f565000c507d4a0471fd4a417893b4b4126c5f12652d44f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f48455cda8b816b3f565000c507d4a0471fd4a417893b4b4126c5f12652d44f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f48455cda8b816b3f565000c507d4a0471fd4a417893b4b4126c5f12652d44f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260"} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f48455cda8b816b3f565000c507d4a0471fd4a417893b4b4126c5f12652d44f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f48455cda8b816b3f565000c507d4a0471fd4a417893b4b4126c5f12652d44f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f48455cda8b816b3f565000c507d4a0471fd4a417893b4b4126c5f12652d44f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"f48455cda8b816b3f565000c507d4a0471fd4a417893b4b4126c5f12652d44f8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"f48455cda8b816b3f565000c507d4a0471fd4a417893b4b4126c5f12652d44f8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f48455cda8b816b3f565000c507d4a0471fd4a417893b4b4126c5f12652d44f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f48455cda8b816b3f565000c507d4a0471fd4a417893b4b4126c5f12652d44f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc1fd61752c8e7f4787129bd9069a6b6d32b08361375219be46f6b2f17134537","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc1fd61752c8e7f4787129bd9069a6b6d32b08361375219be46f6b2f17134537","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc1fd61752c8e7f4787129bd9069a6b6d32b08361375219be46f6b2f17134537","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc1fd61752c8e7f4787129bd9069a6b6d32b08361375219be46f6b2f17134537","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f48455cda8b816b3f565000c507d4a0471fd4a417893b4b4126c5f12652d44f8"} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc1fd61752c8e7f4787129bd9069a6b6d32b08361375219be46f6b2f17134537","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc1fd61752c8e7f4787129bd9069a6b6d32b08361375219be46f6b2f17134537"} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc1fd61752c8e7f4787129bd9069a6b6d32b08361375219be46f6b2f17134537","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc1fd61752c8e7f4787129bd9069a6b6d32b08361375219be46f6b2f17134537","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc1fd61752c8e7f4787129bd9069a6b6d32b08361375219be46f6b2f17134537"} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc1fd61752c8e7f4787129bd9069a6b6d32b08361375219be46f6b2f17134537","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc1fd61752c8e7f4787129bd9069a6b6d32b08361375219be46f6b2f17134537"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc1fd61752c8e7f4787129bd9069a6b6d32b08361375219be46f6b2f17134537","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc1fd61752c8e7f4787129bd9069a6b6d32b08361375219be46f6b2f17134537","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc1fd61752c8e7f4787129bd9069a6b6d32b08361375219be46f6b2f17134537","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc1fd61752c8e7f4787129bd9069a6b6d32b08361375219be46f6b2f17134537","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc1fd61752c8e7f4787129bd9069a6b6d32b08361375219be46f6b2f17134537","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc1fd61752c8e7f4787129bd9069a6b6d32b08361375219be46f6b2f17134537"} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc1fd61752c8e7f4787129bd9069a6b6d32b08361375219be46f6b2f17134537","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc1fd61752c8e7f4787129bd9069a6b6d32b08361375219be46f6b2f17134537"} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc1fd61752c8e7f4787129bd9069a6b6d32b08361375219be46f6b2f17134537","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc1fd61752c8e7f4787129bd9069a6b6d32b08361375219be46f6b2f17134537"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc1fd61752c8e7f4787129bd9069a6b6d32b08361375219be46f6b2f17134537","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73ad1f0e388e1089d9550977ac4e93b4daf14249d55869f56d1e81aa1832e52f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73ad1f0e388e1089d9550977ac4e93b4daf14249d55869f56d1e81aa1832e52f"} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73ad1f0e388e1089d9550977ac4e93b4daf14249d55869f56d1e81aa1832e52f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc1fd61752c8e7f4787129bd9069a6b6d32b08361375219be46f6b2f17134537","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc1fd61752c8e7f4787129bd9069a6b6d32b08361375219be46f6b2f17134537","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"73ad1f0e388e1089d9550977ac4e93b4daf14249d55869f56d1e81aa1832e52f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["73ad1f0e388e1089d9550977ac4e93b4daf14249d55869f56d1e81aa1832e52f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc1fd61752c8e7f4787129bd9069a6b6d32b08361375219be46f6b2f17134537"} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"73ad1f0e388e1089d9550977ac4e93b4daf14249d55869f56d1e81aa1832e52f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc1fd61752c8e7f4787129bd9069a6b6d32b08361375219be46f6b2f17134537","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc1fd61752c8e7f4787129bd9069a6b6d32b08361375219be46f6b2f17134537"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73ad1f0e388e1089d9550977ac4e93b4daf14249d55869f56d1e81aa1832e52f"} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc1fd61752c8e7f4787129bd9069a6b6d32b08361375219be46f6b2f17134537","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"73ad1f0e388e1089d9550977ac4e93b4daf14249d55869f56d1e81aa1832e52f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc1fd61752c8e7f4787129bd9069a6b6d32b08361375219be46f6b2f17134537","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc1fd61752c8e7f4787129bd9069a6b6d32b08361375219be46f6b2f17134537","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc1fd61752c8e7f4787129bd9069a6b6d32b08361375219be46f6b2f17134537","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc1fd61752c8e7f4787129bd9069a6b6d32b08361375219be46f6b2f17134537"} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc1fd61752c8e7f4787129bd9069a6b6d32b08361375219be46f6b2f17134537","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc1fd61752c8e7f4787129bd9069a6b6d32b08361375219be46f6b2f17134537"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc1fd61752c8e7f4787129bd9069a6b6d32b08361375219be46f6b2f17134537","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc1fd61752c8e7f4787129bd9069a6b6d32b08361375219be46f6b2f17134537","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/73ad1f0e388e1089d9550977ac4e93b4daf14249d55869f56d1e81aa1832e52f"} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc1fd61752c8e7f4787129bd9069a6b6d32b08361375219be46f6b2f17134537"} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e9ad15e3e783328c53fb48dc463dfd011863e3cad00d0435686349ef6c0e2e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e9ad15e3e783328c53fb48dc463dfd011863e3cad00d0435686349ef6c0e2e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d21ea21403ba40ef89ba8d227891a22df9409265283ce936c71a9a00b809801","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e9ad15e3e783328c53fb48dc463dfd011863e3cad00d0435686349ef6c0e2e2"} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d21ea21403ba40ef89ba8d227891a22df9409265283ce936c71a9a00b809801","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e9ad15e3e783328c53fb48dc463dfd011863e3cad00d0435686349ef6c0e2e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e9ad15e3e783328c53fb48dc463dfd011863e3cad00d0435686349ef6c0e2e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d21ea21403ba40ef89ba8d227891a22df9409265283ce936c71a9a00b809801"} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e9ad15e3e783328c53fb48dc463dfd011863e3cad00d0435686349ef6c0e2e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d21ea21403ba40ef89ba8d227891a22df9409265283ce936c71a9a00b809801","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d21ea21403ba40ef89ba8d227891a22df9409265283ce936c71a9a00b809801"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d21ea21403ba40ef89ba8d227891a22df9409265283ce936c71a9a00b809801","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e9ad15e3e783328c53fb48dc463dfd011863e3cad00d0435686349ef6c0e2e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e9ad15e3e783328c53fb48dc463dfd011863e3cad00d0435686349ef6c0e2e2"} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e9ad15e3e783328c53fb48dc463dfd011863e3cad00d0435686349ef6c0e2e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d21ea21403ba40ef89ba8d227891a22df9409265283ce936c71a9a00b809801","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d21ea21403ba40ef89ba8d227891a22df9409265283ce936c71a9a00b809801"} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e9ad15e3e783328c53fb48dc463dfd011863e3cad00d0435686349ef6c0e2e2"} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d21ea21403ba40ef89ba8d227891a22df9409265283ce936c71a9a00b809801","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e9ad15e3e783328c53fb48dc463dfd011863e3cad00d0435686349ef6c0e2e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e9ad15e3e783328c53fb48dc463dfd011863e3cad00d0435686349ef6c0e2e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22024fbbb31cfca15c0a0b30af3c2c45c346246799dae4f6514a6e8b5e927160"} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d21ea21403ba40ef89ba8d227891a22df9409265283ce936c71a9a00b809801"} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e9ad15e3e783328c53fb48dc463dfd011863e3cad00d0435686349ef6c0e2e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22024fbbb31cfca15c0a0b30af3c2c45c346246799dae4f6514a6e8b5e927160","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22024fbbb31cfca15c0a0b30af3c2c45c346246799dae4f6514a6e8b5e927160"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e9ad15e3e783328c53fb48dc463dfd011863e3cad00d0435686349ef6c0e2e2"} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22024fbbb31cfca15c0a0b30af3c2c45c346246799dae4f6514a6e8b5e927160","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d21ea21403ba40ef89ba8d227891a22df9409265283ce936c71a9a00b809801","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d21ea21403ba40ef89ba8d227891a22df9409265283ce936c71a9a00b809801"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8d3cb8835ef4feca718d8c13ed2b637cf1a8aaac405446079ea4e5b58bea9c1"} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d6a0c7a92374308e531ad60ad158f12bb90fae7c46e98b6566799a2561a4783"} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22024fbbb31cfca15c0a0b30af3c2c45c346246799dae4f6514a6e8b5e927160"} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d21ea21403ba40ef89ba8d227891a22df9409265283ce936c71a9a00b809801","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e9ad15e3e783328c53fb48dc463dfd011863e3cad00d0435686349ef6c0e2e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e8d3cb8835ef4feca718d8c13ed2b637cf1a8aaac405446079ea4e5b58bea9c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e8d3cb8835ef4feca718d8c13ed2b637cf1a8aaac405446079ea4e5b58bea9c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d21ea21403ba40ef89ba8d227891a22df9409265283ce936c71a9a00b809801"} {"level":"info","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14cafb72d30372ed9a3c1070bf2d9936ba61067659f54f73ac3d839349a8af38"} {"level":"info","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e8d3cb8835ef4feca718d8c13ed2b637cf1a8aaac405446079ea4e5b58bea9c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d6a0c7a92374308e531ad60ad158f12bb90fae7c46e98b6566799a2561a4783","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d6a0c7a92374308e531ad60ad158f12bb90fae7c46e98b6566799a2561a4783"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8f2937bdcced6fdc0b730666c319685746575a169845e310302d94a589d9a0a"} {"level":"info","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e8d3cb8835ef4feca718d8c13ed2b637cf1a8aaac405446079ea4e5b58bea9c1"} {"level":"info","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d6a0c7a92374308e531ad60ad158f12bb90fae7c46e98b6566799a2561a4783","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22024fbbb31cfca15c0a0b30af3c2c45c346246799dae4f6514a6e8b5e927160","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d21ea21403ba40ef89ba8d227891a22df9409265283ce936c71a9a00b809801","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14cafb72d30372ed9a3c1070bf2d9936ba61067659f54f73ac3d839349a8af38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14cafb72d30372ed9a3c1070bf2d9936ba61067659f54f73ac3d839349a8af38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c"} {"level":"info","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39b46a7e783f580056d3cec0a96df5aef44333da4252624a96054ee0ff06dd73"} {"level":"info","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c8917654dc2b564f61d87ca0100a8d9c1a32b3dc11116c2d01accd41818e7a9"} {"level":"info","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14cafb72d30372ed9a3c1070bf2d9936ba61067659f54f73ac3d839349a8af38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f8f2937bdcced6fdc0b730666c319685746575a169845e310302d94a589d9a0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f8f2937bdcced6fdc0b730666c319685746575a169845e310302d94a589d9a0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3284bc2af4c25b95653e9939c677f7704fe3f2b78925ce4f5fc3be503069f1dc"} {"level":"info","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d6a0c7a92374308e531ad60ad158f12bb90fae7c46e98b6566799a2561a4783"} {"level":"info","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f8f2937bdcced6fdc0b730666c319685746575a169845e310302d94a589d9a0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e8d3cb8835ef4feca718d8c13ed2b637cf1a8aaac405446079ea4e5b58bea9c1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c11535e319ff14c8d808759deb59e5f526c088939ecf8437da1f5469c0ce2c4"} {"level":"info","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff"} {"level":"info","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14cafb72d30372ed9a3c1070bf2d9936ba61067659f54f73ac3d839349a8af38"} {"level":"info","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39b46a7e783f580056d3cec0a96df5aef44333da4252624a96054ee0ff06dd73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39b46a7e783f580056d3cec0a96df5aef44333da4252624a96054ee0ff06dd73"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0b04d5a36f358c7448d5c15f4fca5594917b8e61b4781633cc35a79a1074487"} {"level":"info","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a72d04b029f53091d1140f0cdea20c3b5a5503b62e9604e1b113125c2e68360e"} {"level":"info","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/977920e9798f234faf26ddd961d2ebf82ab1c8d27a48f57a89672086eab54694"} {"level":"info","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39b46a7e783f580056d3cec0a96df5aef44333da4252624a96054ee0ff06dd73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c8917654dc2b564f61d87ca0100a8d9c1a32b3dc11116c2d01accd41818e7a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c8917654dc2b564f61d87ca0100a8d9c1a32b3dc11116c2d01accd41818e7a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f8f2937bdcced6fdc0b730666c319685746575a169845e310302d94a589d9a0a"} {"level":"info","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d49f1dede69a376af13b2bfce80277f03ffa9bd0e545aa1faa8086426b50d9f6"} {"level":"info","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c8917654dc2b564f61d87ca0100a8d9c1a32b3dc11116c2d01accd41818e7a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3284bc2af4c25b95653e9939c677f7704fe3f2b78925ce4f5fc3be503069f1dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3284bc2af4c25b95653e9939c677f7704fe3f2b78925ce4f5fc3be503069f1dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c"} {"level":"info","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39b46a7e783f580056d3cec0a96df5aef44333da4252624a96054ee0ff06dd73"} {"level":"info","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c8917654dc2b564f61d87ca0100a8d9c1a32b3dc11116c2d01accd41818e7a9"} {"level":"info","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3284bc2af4c25b95653e9939c677f7704fe3f2b78925ce4f5fc3be503069f1dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d6a0c7a92374308e531ad60ad158f12bb90fae7c46e98b6566799a2561a4783","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9c11535e319ff14c8d808759deb59e5f526c088939ecf8437da1f5469c0ce2c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9c11535e319ff14c8d808759deb59e5f526c088939ecf8437da1f5469c0ce2c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3284bc2af4c25b95653e9939c677f7704fe3f2b78925ce4f5fc3be503069f1dc"} {"level":"info","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9c11535e319ff14c8d808759deb59e5f526c088939ecf8437da1f5469c0ce2c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9c11535e319ff14c8d808759deb59e5f526c088939ecf8437da1f5469c0ce2c4"} {"level":"info","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14cafb72d30372ed9a3c1070bf2d9936ba61067659f54f73ac3d839349a8af38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0b04d5a36f358c7448d5c15f4fca5594917b8e61b4781633cc35a79a1074487","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0b04d5a36f358c7448d5c15f4fca5594917b8e61b4781633cc35a79a1074487"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff"} {"level":"info","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0b04d5a36f358c7448d5c15f4fca5594917b8e61b4781633cc35a79a1074487","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a72d04b029f53091d1140f0cdea20c3b5a5503b62e9604e1b113125c2e68360e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a72d04b029f53091d1140f0cdea20c3b5a5503b62e9604e1b113125c2e68360e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0b04d5a36f358c7448d5c15f4fca5594917b8e61b4781633cc35a79a1074487"} {"level":"info","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a72d04b029f53091d1140f0cdea20c3b5a5503b62e9604e1b113125c2e68360e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"977920e9798f234faf26ddd961d2ebf82ab1c8d27a48f57a89672086eab54694","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["977920e9798f234faf26ddd961d2ebf82ab1c8d27a48f57a89672086eab54694"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a72d04b029f53091d1140f0cdea20c3b5a5503b62e9604e1b113125c2e68360e"} {"level":"info","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"977920e9798f234faf26ddd961d2ebf82ab1c8d27a48f57a89672086eab54694","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f8f2937bdcced6fdc0b730666c319685746575a169845e310302d94a589d9a0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d49f1dede69a376af13b2bfce80277f03ffa9bd0e545aa1faa8086426b50d9f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d49f1dede69a376af13b2bfce80277f03ffa9bd0e545aa1faa8086426b50d9f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/977920e9798f234faf26ddd961d2ebf82ab1c8d27a48f57a89672086eab54694"} {"level":"info","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d49f1dede69a376af13b2bfce80277f03ffa9bd0e545aa1faa8086426b50d9f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39b46a7e783f580056d3cec0a96df5aef44333da4252624a96054ee0ff06dd73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c8917654dc2b564f61d87ca0100a8d9c1a32b3dc11116c2d01accd41818e7a9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3284bc2af4c25b95653e9939c677f7704fe3f2b78925ce4f5fc3be503069f1dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9c11535e319ff14c8d808759deb59e5f526c088939ecf8437da1f5469c0ce2c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0b04d5a36f358c7448d5c15f4fca5594917b8e61b4781633cc35a79a1074487","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a72d04b029f53091d1140f0cdea20c3b5a5503b62e9604e1b113125c2e68360e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"977920e9798f234faf26ddd961d2ebf82ab1c8d27a48f57a89672086eab54694","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d49f1dede69a376af13b2bfce80277f03ffa9bd0e545aa1faa8086426b50d9f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:54:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:54:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d49f1dede69a376af13b2bfce80277f03ffa9bd0e545aa1faa8086426b50d9f6"} {"level":"info","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d49f1dede69a376af13b2bfce80277f03ffa9bd0e545aa1faa8086426b50d9f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d49f1dede69a376af13b2bfce80277f03ffa9bd0e545aa1faa8086426b50d9f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d49f1dede69a376af13b2bfce80277f03ffa9bd0e545aa1faa8086426b50d9f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d49f1dede69a376af13b2bfce80277f03ffa9bd0e545aa1faa8086426b50d9f6"} {"level":"info","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d49f1dede69a376af13b2bfce80277f03ffa9bd0e545aa1faa8086426b50d9f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d49f1dede69a376af13b2bfce80277f03ffa9bd0e545aa1faa8086426b50d9f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:54:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:54:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d49f1dede69a376af13b2bfce80277f03ffa9bd0e545aa1faa8086426b50d9f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d49f1dede69a376af13b2bfce80277f03ffa9bd0e545aa1faa8086426b50d9f6"} {"level":"error","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d49f1dede69a376af13b2bfce80277f03ffa9bd0e545aa1faa8086426b50d9f6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d49f1dede69a376af13b2bfce80277f03ffa9bd0e545aa1faa8086426b50d9f6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d49f1dede69a376af13b2bfce80277f03ffa9bd0e545aa1faa8086426b50d9f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:54:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d49f1dede69a376af13b2bfce80277f03ffa9bd0e545aa1faa8086426b50d9f6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80f5afe0-6fa4-46c6-b163-a9de63452000","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55084","PortSpecifier":{"PortValue":55084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"80f5afe0-6fa4-46c6-b163-a9de63452000","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80f5afe0-6fa4-46c6-b163-a9de63452000","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55084","PortSpecifier":{"PortValue":55084}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081303,"nanos":52431337},"http":{"id":"80f5afe0-6fa4-46c6-b163-a9de63452000","method":"POST","headers":{":authority":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"80f5afe0-6fa4-46c6-b163-a9de63452000","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"80f5afe0-6fa4-46c6-b163-a9de63452000","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b176e956-e200-4ee7-9cdb-029b28c484d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2abb13a-f450-45d5-997e-e063425694e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/543c051bbd65"]}} {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"80f5afe0-6fa4-46c6-b163-a9de63452000","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/543c051bbd65"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2abb13a-f450-45d5-997e-e063425694e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b176e956-e200-4ee7-9cdb-029b28c484d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d0b04d5a36f358c7448d5c15f4fca5594917b8e61b4781633cc35a79a1074487"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.74:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80f5afe0-6fa4-46c6-b163-a9de63452000","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80f5afe0-6fa4-46c6-b163-a9de63452000","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80f5afe0-6fa4-46c6-b163-a9de63452000","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a20d61/sub-test-model-a20d61\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a20d61/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"80f5afe0-6fa4-46c6-b163-a9de63452000","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80f5afe0-6fa4-46c6-b163-a9de63452000","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80f5afe0-6fa4-46c6-b163-a9de63452000","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80f5afe0-6fa4-46c6-b163-a9de63452000","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80f5afe0-6fa4-46c6-b163-a9de63452000","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"68c0db61-de32-4459-a45e-d1c279d0b0a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43850","PortSpecifier":{"PortValue":43850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"68c0db61-de32-4459-a45e-d1c279d0b0a5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-60c814.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"68c0db61-de32-4459-a45e-d1c279d0b0a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43850","PortSpecifier":{"PortValue":43850}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081303,"nanos":104675340},"http":{"id":"68c0db61-de32-4459-a45e-d1c279d0b0a5","method":"POST","headers":{":authority":"e2e-shared-b-60c814.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"68c0db61-de32-4459-a45e-d1c279d0b0a5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"68c0db61-de32-4459-a45e-d1c279d0b0a5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b176e956-e200-4ee7-9cdb-029b28c484d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2abb13a-f450-45d5-997e-e063425694e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/543c051bbd65"]}} {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"68c0db61-de32-4459-a45e-d1c279d0b0a5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/543c051bbd65"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2abb13a-f450-45d5-997e-e063425694e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b176e956-e200-4ee7-9cdb-029b28c484d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-60c814.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68c0db61-de32-4459-a45e-d1c279d0b0a5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68c0db61-de32-4459-a45e-d1c279d0b0a5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"68c0db61-de32-4459-a45e-d1c279d0b0a5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-60c814/sub-test-model-60c814\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-60c814/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"68c0db61-de32-4459-a45e-d1c279d0b0a5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68c0db61-de32-4459-a45e-d1c279d0b0a5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"68c0db61-de32-4459-a45e-d1c279d0b0a5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"68c0db61-de32-4459-a45e-d1c279d0b0a5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"68c0db61-de32-4459-a45e-d1c279d0b0a5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ddfb2c40-84f8-4cc7-a4a3-ffff968e0fa3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55090","PortSpecifier":{"PortValue":55090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ddfb2c40-84f8-4cc7-a4a3-ffff968e0fa3","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ddfb2c40-84f8-4cc7-a4a3-ffff968e0fa3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55090","PortSpecifier":{"PortValue":55090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081303,"nanos":157011159},"http":{"id":"ddfb2c40-84f8-4cc7-a4a3-ffff968e0fa3","method":"GET","headers":{":authority":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ddfb2c40-84f8-4cc7-a4a3-ffff968e0fa3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5AvvGTltgDIIEEGa_RKbyiKinbLmnSbtB9d3C7kBoef7uP3cNtzHd9GEbDZH"} {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ddfb2c40-84f8-4cc7-a4a3-ffff968e0fa3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a20d61.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5AvvGTltgDIIEEGa_RKbyiKinbLmnSbtB9d3C7kBoef7uP3cNtzHd9GEbDZH\"}"} {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ddfb2c40-84f8-4cc7-a4a3-ffff968e0fa3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a20d61.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f8d9894c-7c5f-464b-a1b2-aa71214585ee","keyName":"e2e-sub-iso-2fa9d5","subscription":"e2e-a-only-4555a2","tenant":"e2e-shared-a-a20d61","userId":"f8d9894c-7c5f-464b-a1b2-aa71214585ee","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ddfb2c40-84f8-4cc7-a4a3-ffff968e0fa3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ddfb2c40-84f8-4cc7-a4a3-ffff968e0fa3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ddfb2c40-84f8-4cc7-a4a3-ffff968e0fa3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ddfb2c40-84f8-4cc7-a4a3-ffff968e0fa3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a20d61/sub-test-model-a20d61\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a20d61/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ddfb2c40-84f8-4cc7-a4a3-ffff968e0fa3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ddfb2c40-84f8-4cc7-a4a3-ffff968e0fa3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-4555a2"} {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ddfb2c40-84f8-4cc7-a4a3-ffff968e0fa3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ddfb2c40-84f8-4cc7-a4a3-ffff968e0fa3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ddfb2c40-84f8-4cc7-a4a3-ffff968e0fa3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ddfb2c40-84f8-4cc7-a4a3-ffff968e0fa3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96d23698-3bab-4ddd-8ca9-f95dee23ec5e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43860","PortSpecifier":{"PortValue":43860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"96d23698-3bab-4ddd-8ca9-f95dee23ec5e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-60c814.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"96d23698-3bab-4ddd-8ca9-f95dee23ec5e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43860","PortSpecifier":{"PortValue":43860}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081303,"nanos":209187918},"http":{"id":"96d23698-3bab-4ddd-8ca9-f95dee23ec5e","method":"GET","headers":{":authority":"e2e-shared-b-60c814.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"96d23698-3bab-4ddd-8ca9-f95dee23ec5e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-RVLlqAk6BW8O1rv8_gOCpNOAMVc3AwMyc3rBgr7HIJWo8TN0thptc7cYaDl1"} {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"96d23698-3bab-4ddd-8ca9-f95dee23ec5e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-60c814.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-RVLlqAk6BW8O1rv8_gOCpNOAMVc3AwMyc3rBgr7HIJWo8TN0thptc7cYaDl1\"}"} {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"96d23698-3bab-4ddd-8ca9-f95dee23ec5e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-60c814.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"396f21d9-4b71-4d52-ac04-f0db7f1e4a0a","keyName":"e2e-sub-iso-dc8486","subscription":"e2e-b-only-4555a2","tenant":"e2e-shared-b-60c814","userId":"396f21d9-4b71-4d52-ac04-f0db7f1e4a0a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"96d23698-3bab-4ddd-8ca9-f95dee23ec5e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96d23698-3bab-4ddd-8ca9-f95dee23ec5e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96d23698-3bab-4ddd-8ca9-f95dee23ec5e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"96d23698-3bab-4ddd-8ca9-f95dee23ec5e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-60c814/sub-test-model-60c814\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-60c814/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"96d23698-3bab-4ddd-8ca9-f95dee23ec5e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96d23698-3bab-4ddd-8ca9-f95dee23ec5e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96d23698-3bab-4ddd-8ca9-f95dee23ec5e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"96d23698-3bab-4ddd-8ca9-f95dee23ec5e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-4555a2"} {"level":"info","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96d23698-3bab-4ddd-8ca9-f95dee23ec5e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T15:55:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"96d23698-3bab-4ddd-8ca9-f95dee23ec5e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9913dda1-8783-419c-bbeb-3aecf796656f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58118","PortSpecifier":{"PortValue":58118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9913dda1-8783-419c-bbeb-3aecf796656f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9913dda1-8783-419c-bbeb-3aecf796656f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58118","PortSpecifier":{"PortValue":58118}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081327,"nanos":839970837},"http":{"id":"9913dda1-8783-419c-bbeb-3aecf796656f","method":"POST","headers":{":authority":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9913dda1-8783-419c-bbeb-3aecf796656f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9913dda1-8783-419c-bbeb-3aecf796656f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b176e956-e200-4ee7-9cdb-029b28c484d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2abb13a-f450-45d5-997e-e063425694e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/543c051bbd65"]}} {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9913dda1-8783-419c-bbeb-3aecf796656f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/543c051bbd65"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2abb13a-f450-45d5-997e-e063425694e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b176e956-e200-4ee7-9cdb-029b28c484d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d0b04d5a36f358c7448d5c15f4fca5594917b8e61b4781633cc35a79a1074487"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.74:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9913dda1-8783-419c-bbeb-3aecf796656f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9913dda1-8783-419c-bbeb-3aecf796656f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9913dda1-8783-419c-bbeb-3aecf796656f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a20d61/sub-test-model-a20d61\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a20d61/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9913dda1-8783-419c-bbeb-3aecf796656f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9913dda1-8783-419c-bbeb-3aecf796656f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9913dda1-8783-419c-bbeb-3aecf796656f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9913dda1-8783-419c-bbeb-3aecf796656f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9913dda1-8783-419c-bbeb-3aecf796656f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1c12a6a-164f-4394-99e8-2ace2e97d886","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41460","PortSpecifier":{"PortValue":41460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c1c12a6a-164f-4394-99e8-2ace2e97d886","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-60c814.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c1c12a6a-164f-4394-99e8-2ace2e97d886","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41460","PortSpecifier":{"PortValue":41460}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081327,"nanos":878513183},"http":{"id":"c1c12a6a-164f-4394-99e8-2ace2e97d886","method":"POST","headers":{":authority":"e2e-shared-b-60c814.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c1c12a6a-164f-4394-99e8-2ace2e97d886","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c1c12a6a-164f-4394-99e8-2ace2e97d886","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b176e956-e200-4ee7-9cdb-029b28c484d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2abb13a-f450-45d5-997e-e063425694e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/543c051bbd65"]}} {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c1c12a6a-164f-4394-99e8-2ace2e97d886","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/543c051bbd65"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2abb13a-f450-45d5-997e-e063425694e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b176e956-e200-4ee7-9cdb-029b28c484d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-60c814.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1c12a6a-164f-4394-99e8-2ace2e97d886","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1c12a6a-164f-4394-99e8-2ace2e97d886","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c1c12a6a-164f-4394-99e8-2ace2e97d886","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-60c814/sub-test-model-60c814\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-60c814/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c1c12a6a-164f-4394-99e8-2ace2e97d886","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1c12a6a-164f-4394-99e8-2ace2e97d886","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c1c12a6a-164f-4394-99e8-2ace2e97d886","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1c12a6a-164f-4394-99e8-2ace2e97d886","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c1c12a6a-164f-4394-99e8-2ace2e97d886","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"775a30d0-2d80-4d01-a4be-6da0acf73ae3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58132","PortSpecifier":{"PortValue":58132}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"775a30d0-2d80-4d01-a4be-6da0acf73ae3","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"775a30d0-2d80-4d01-a4be-6da0acf73ae3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58132","PortSpecifier":{"PortValue":58132}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081327,"nanos":916546354},"http":{"id":"775a30d0-2d80-4d01-a4be-6da0acf73ae3","method":"POST","headers":{":authority":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"775a30d0-2d80-4d01-a4be-6da0acf73ae3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-18Hs3h6H6B9gXgy90_4FNsMP3rbJ8kMdb5eWuZClH8jQUa61yo57qkvW0Bp72"} {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"775a30d0-2d80-4d01-a4be-6da0acf73ae3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a20d61.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-18Hs3h6H6B9gXgy90_4FNsMP3rbJ8kMdb5eWuZClH8jQUa61yo57qkvW0Bp72\"}"} {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"775a30d0-2d80-4d01-a4be-6da0acf73ae3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a20d61.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9346c5e3-dd14-4b1f-b2a4-6f55f71311d9","keyName":"e2e-sub-iso-22c299","subscription":"e2e-shared-sub-be483f","tenant":"e2e-shared-a-a20d61","userId":"9346c5e3-dd14-4b1f-b2a4-6f55f71311d9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"775a30d0-2d80-4d01-a4be-6da0acf73ae3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"775a30d0-2d80-4d01-a4be-6da0acf73ae3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"775a30d0-2d80-4d01-a4be-6da0acf73ae3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"775a30d0-2d80-4d01-a4be-6da0acf73ae3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a20d61/sub-test-model-a20d61\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a20d61/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"775a30d0-2d80-4d01-a4be-6da0acf73ae3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"775a30d0-2d80-4d01-a4be-6da0acf73ae3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-be483f"} {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"775a30d0-2d80-4d01-a4be-6da0acf73ae3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"775a30d0-2d80-4d01-a4be-6da0acf73ae3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"775a30d0-2d80-4d01-a4be-6da0acf73ae3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"775a30d0-2d80-4d01-a4be-6da0acf73ae3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7424f56-7567-4876-9ef0-2bdf41bcaa7c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41476","PortSpecifier":{"PortValue":41476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f7424f56-7567-4876-9ef0-2bdf41bcaa7c","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-60c814.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f7424f56-7567-4876-9ef0-2bdf41bcaa7c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41476","PortSpecifier":{"PortValue":41476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081327,"nanos":947323507},"http":{"id":"f7424f56-7567-4876-9ef0-2bdf41bcaa7c","method":"POST","headers":{":authority":"e2e-shared-b-60c814.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f7424f56-7567-4876-9ef0-2bdf41bcaa7c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-B8vAtnHFEciVE8wm_XNalQBZZyhOstVoAkEyaFBg8dDeJi6PRe1TS82TMxSe"} {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f7424f56-7567-4876-9ef0-2bdf41bcaa7c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-60c814.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-B8vAtnHFEciVE8wm_XNalQBZZyhOstVoAkEyaFBg8dDeJi6PRe1TS82TMxSe\"}"} {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f7424f56-7567-4876-9ef0-2bdf41bcaa7c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-60c814.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"792ad23d-a0a3-4d48-9a99-2bc3272e8f10","keyName":"e2e-sub-iso-440bd1","subscription":"e2e-shared-sub-be483f","tenant":"e2e-shared-b-60c814","userId":"792ad23d-a0a3-4d48-9a99-2bc3272e8f10","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f7424f56-7567-4876-9ef0-2bdf41bcaa7c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7424f56-7567-4876-9ef0-2bdf41bcaa7c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7424f56-7567-4876-9ef0-2bdf41bcaa7c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f7424f56-7567-4876-9ef0-2bdf41bcaa7c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-60c814/sub-test-model-60c814\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-60c814/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f7424f56-7567-4876-9ef0-2bdf41bcaa7c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7424f56-7567-4876-9ef0-2bdf41bcaa7c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7424f56-7567-4876-9ef0-2bdf41bcaa7c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-be483f"} {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f7424f56-7567-4876-9ef0-2bdf41bcaa7c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7424f56-7567-4876-9ef0-2bdf41bcaa7c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T15:55:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f7424f56-7567-4876-9ef0-2bdf41bcaa7c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T15:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"} {"level":"info","ts":"2026-07-26T15:55:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14cafb72d30372ed9a3c1070bf2d9936ba61067659f54f73ac3d839349a8af38"} {"level":"info","ts":"2026-07-26T15:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d21ea21403ba40ef89ba8d227891a22df9409265283ce936c71a9a00b809801"} {"level":"info","ts":"2026-07-26T15:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/62a0bc8a96dfb411c581c3c3d5d97dc8681e95ef0fd418c3b8f707de37d8871e"} {"level":"info","ts":"2026-07-26T15:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff"} {"level":"info","ts":"2026-07-26T15:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc1fd61752c8e7f4787129bd9069a6b6d32b08361375219be46f6b2f17134537"} {"level":"info","ts":"2026-07-26T15:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f48455cda8b816b3f565000c507d4a0471fd4a417893b4b4126c5f12652d44f8"} {"level":"info","ts":"2026-07-26T15:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e9ad15e3e783328c53fb48dc463dfd011863e3cad00d0435686349ef6c0e2e2"} {"level":"info","ts":"2026-07-26T15:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c11535e319ff14c8d808759deb59e5f526c088939ecf8437da1f5469c0ce2c4"} {"level":"info","ts":"2026-07-26T15:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/73ad1f0e388e1089d9550977ac4e93b4daf14249d55869f56d1e81aa1832e52f"} {"level":"info","ts":"2026-07-26T15:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0b04d5a36f358c7448d5c15f4fca5594917b8e61b4781633cc35a79a1074487"} {"level":"info","ts":"2026-07-26T15:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39b46a7e783f580056d3cec0a96df5aef44333da4252624a96054ee0ff06dd73"} {"level":"info","ts":"2026-07-26T15:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d49f1dede69a376af13b2bfce80277f03ffa9bd0e545aa1faa8086426b50d9f6"} {"level":"info","ts":"2026-07-26T15:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f8f2937bdcced6fdc0b730666c319685746575a169845e310302d94a589d9a0a"} {"level":"info","ts":"2026-07-26T15:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3284bc2af4c25b95653e9939c677f7704fe3f2b78925ce4f5fc3be503069f1dc"} {"level":"info","ts":"2026-07-26T15:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c"} {"level":"info","ts":"2026-07-26T15:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e8d3cb8835ef4feca718d8c13ed2b637cf1a8aaac405446079ea4e5b58bea9c1"} {"level":"info","ts":"2026-07-26T15:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c8917654dc2b564f61d87ca0100a8d9c1a32b3dc11116c2d01accd41818e7a9"} {"level":"info","ts":"2026-07-26T15:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d6a0c7a92374308e531ad60ad158f12bb90fae7c46e98b6566799a2561a4783"} {"level":"info","ts":"2026-07-26T15:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/977920e9798f234faf26ddd961d2ebf82ab1c8d27a48f57a89672086eab54694"} {"level":"info","ts":"2026-07-26T15:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260"} {"level":"info","ts":"2026-07-26T15:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a72d04b029f53091d1140f0cdea20c3b5a5503b62e9604e1b113125c2e68360e"} {"level":"info","ts":"2026-07-26T15:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eba7263925be6251a54e4efe224930e37ec3dfc59cd17f8a15ac3204a5b13a7d"} {"level":"info","ts":"2026-07-26T15:55:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22024fbbb31cfca15c0a0b30af3c2c45c346246799dae4f6514a6e8b5e927160"} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c"} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c"} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c"} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260"} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c"} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260"} {"level":"error","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c"} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf540dda806e5203acd091000316e88a570a94e76959f17b08198510be740d14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260"} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf540dda806e5203acd091000316e88a570a94e76959f17b08198510be740d14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf540dda806e5203acd091000316e88a570a94e76959f17b08198510be740d14"} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf540dda806e5203acd091000316e88a570a94e76959f17b08198510be740d14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf540dda806e5203acd091000316e88a570a94e76959f17b08198510be740d14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c"} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf540dda806e5203acd091000316e88a570a94e76959f17b08198510be740d14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260"} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf540dda806e5203acd091000316e88a570a94e76959f17b08198510be740d14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf540dda806e5203acd091000316e88a570a94e76959f17b08198510be740d14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf540dda806e5203acd091000316e88a570a94e76959f17b08198510be740d14"} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fde862fd6365b274b10d5a342b338669c320256ba7f80768a3a735e305dc86e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c"} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fde862fd6365b274b10d5a342b338669c320256ba7f80768a3a735e305dc86e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf540dda806e5203acd091000316e88a570a94e76959f17b08198510be740d14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf540dda806e5203acd091000316e88a570a94e76959f17b08198510be740d14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf540dda806e5203acd091000316e88a570a94e76959f17b08198510be740d14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260"} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fde862fd6365b274b10d5a342b338669c320256ba7f80768a3a735e305dc86e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fde862fd6365b274b10d5a342b338669c320256ba7f80768a3a735e305dc86e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf540dda806e5203acd091000316e88a570a94e76959f17b08198510be740d14","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fde862fd6365b274b10d5a342b338669c320256ba7f80768a3a735e305dc86e"} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fde862fd6365b274b10d5a342b338669c320256ba7f80768a3a735e305dc86e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fde862fd6365b274b10d5a342b338669c320256ba7f80768a3a735e305dc86e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf540dda806e5203acd091000316e88a570a94e76959f17b08198510be740d14"} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fde862fd6365b274b10d5a342b338669c320256ba7f80768a3a735e305dc86e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260"} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fde862fd6365b274b10d5a342b338669c320256ba7f80768a3a735e305dc86e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fde862fd6365b274b10d5a342b338669c320256ba7f80768a3a735e305dc86e"} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fde862fd6365b274b10d5a342b338669c320256ba7f80768a3a735e305dc86e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff"} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260"} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fde862fd6365b274b10d5a342b338669c320256ba7f80768a3a735e305dc86e"} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fde862fd6365b274b10d5a342b338669c320256ba7f80768a3a735e305dc86e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fde862fd6365b274b10d5a342b338669c320256ba7f80768a3a735e305dc86e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff"} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fde862fd6365b274b10d5a342b338669c320256ba7f80768a3a735e305dc86e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260"} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e9ad15e3e783328c53fb48dc463dfd011863e3cad00d0435686349ef6c0e2e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e9ad15e3e783328c53fb48dc463dfd011863e3cad00d0435686349ef6c0e2e2"} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e9ad15e3e783328c53fb48dc463dfd011863e3cad00d0435686349ef6c0e2e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fde862fd6365b274b10d5a342b338669c320256ba7f80768a3a735e305dc86e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fde862fd6365b274b10d5a342b338669c320256ba7f80768a3a735e305dc86e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e9ad15e3e783328c53fb48dc463dfd011863e3cad00d0435686349ef6c0e2e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e9ad15e3e783328c53fb48dc463dfd011863e3cad00d0435686349ef6c0e2e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fde862fd6365b274b10d5a342b338669c320256ba7f80768a3a735e305dc86e"} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e9ad15e3e783328c53fb48dc463dfd011863e3cad00d0435686349ef6c0e2e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fde862fd6365b274b10d5a342b338669c320256ba7f80768a3a735e305dc86e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fde862fd6365b274b10d5a342b338669c320256ba7f80768a3a735e305dc86e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff"} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fde862fd6365b274b10d5a342b338669c320256ba7f80768a3a735e305dc86e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e9ad15e3e783328c53fb48dc463dfd011863e3cad00d0435686349ef6c0e2e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e9ad15e3e783328c53fb48dc463dfd011863e3cad00d0435686349ef6c0e2e2"} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e9ad15e3e783328c53fb48dc463dfd011863e3cad00d0435686349ef6c0e2e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e05f023076dd0c0b51e5d51f8146b9b2d571757c36682ccaab2ac27c00ed7765","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e05f023076dd0c0b51e5d51f8146b9b2d571757c36682ccaab2ac27c00ed7765","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fde862fd6365b274b10d5a342b338669c320256ba7f80768a3a735e305dc86e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fde862fd6365b274b10d5a342b338669c320256ba7f80768a3a735e305dc86e"} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fde862fd6365b274b10d5a342b338669c320256ba7f80768a3a735e305dc86e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a497f0e86df293d3ee58df2a03b2b32da7c8525b6a756fe159ad5c2adf9d0823","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e05f023076dd0c0b51e5d51f8146b9b2d571757c36682ccaab2ac27c00ed7765"} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a497f0e86df293d3ee58df2a03b2b32da7c8525b6a756fe159ad5c2adf9d0823","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e9ad15e3e783328c53fb48dc463dfd011863e3cad00d0435686349ef6c0e2e2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e9ad15e3e783328c53fb48dc463dfd011863e3cad00d0435686349ef6c0e2e2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e9ad15e3e783328c53fb48dc463dfd011863e3cad00d0435686349ef6c0e2e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e05f023076dd0c0b51e5d51f8146b9b2d571757c36682ccaab2ac27c00ed7765","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e05f023076dd0c0b51e5d51f8146b9b2d571757c36682ccaab2ac27c00ed7765"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a497f0e86df293d3ee58df2a03b2b32da7c8525b6a756fe159ad5c2adf9d0823"} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e05f023076dd0c0b51e5d51f8146b9b2d571757c36682ccaab2ac27c00ed7765","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fde862fd6365b274b10d5a342b338669c320256ba7f80768a3a735e305dc86e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fde862fd6365b274b10d5a342b338669c320256ba7f80768a3a735e305dc86e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e9ad15e3e783328c53fb48dc463dfd011863e3cad00d0435686349ef6c0e2e2"} {"level":"info","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fde862fd6365b274b10d5a342b338669c320256ba7f80768a3a735e305dc86e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a497f0e86df293d3ee58df2a03b2b32da7c8525b6a756fe159ad5c2adf9d0823","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:56:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a497f0e86df293d3ee58df2a03b2b32da7c8525b6a756fe159ad5c2adf9d0823"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a497f0e86df293d3ee58df2a03b2b32da7c8525b6a756fe159ad5c2adf9d0823","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e9ad15e3e783328c53fb48dc463dfd011863e3cad00d0435686349ef6c0e2e2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e05f023076dd0c0b51e5d51f8146b9b2d571757c36682ccaab2ac27c00ed7765","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fde862fd6365b274b10d5a342b338669c320256ba7f80768a3a735e305dc86e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:56:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:56:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fde862fd6365b274b10d5a342b338669c320256ba7f80768a3a735e305dc86e"} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a497f0e86df293d3ee58df2a03b2b32da7c8525b6a756fe159ad5c2adf9d0823"} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fde862fd6365b274b10d5a342b338669c320256ba7f80768a3a735e305dc86e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a497f0e86df293d3ee58df2a03b2b32da7c8525b6a756fe159ad5c2adf9d0823","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fde862fd6365b274b10d5a342b338669c320256ba7f80768a3a735e305dc86e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:56:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:56:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fde862fd6365b274b10d5a342b338669c320256ba7f80768a3a735e305dc86e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e05f023076dd0c0b51e5d51f8146b9b2d571757c36682ccaab2ac27c00ed7765"} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fde862fd6365b274b10d5a342b338669c320256ba7f80768a3a735e305dc86e"} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fde862fd6365b274b10d5a342b338669c320256ba7f80768a3a735e305dc86e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3da3b0e649d22c9fc037f707206a207dcdd7756dd39ba7553dad35c4038c15e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:56:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:56:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3da3b0e649d22c9fc037f707206a207dcdd7756dd39ba7553dad35c4038c15e5"} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3da3b0e649d22c9fc037f707206a207dcdd7756dd39ba7553dad35c4038c15e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fde862fd6365b274b10d5a342b338669c320256ba7f80768a3a735e305dc86e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:56:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:56:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fde862fd6365b274b10d5a342b338669c320256ba7f80768a3a735e305dc86e"} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fde862fd6365b274b10d5a342b338669c320256ba7f80768a3a735e305dc86e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3da3b0e649d22c9fc037f707206a207dcdd7756dd39ba7553dad35c4038c15e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fde862fd6365b274b10d5a342b338669c320256ba7f80768a3a735e305dc86e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:56:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:56:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fde862fd6365b274b10d5a342b338669c320256ba7f80768a3a735e305dc86e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3da3b0e649d22c9fc037f707206a207dcdd7756dd39ba7553dad35c4038c15e5"} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fde862fd6365b274b10d5a342b338669c320256ba7f80768a3a735e305dc86e"} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fde862fd6365b274b10d5a342b338669c320256ba7f80768a3a735e305dc86e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3da3b0e649d22c9fc037f707206a207dcdd7756dd39ba7553dad35c4038c15e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:56:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:56:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3da3b0e649d22c9fc037f707206a207dcdd7756dd39ba7553dad35c4038c15e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fde862fd6365b274b10d5a342b338669c320256ba7f80768a3a735e305dc86e"} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3da3b0e649d22c9fc037f707206a207dcdd7756dd39ba7553dad35c4038c15e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fde862fd6365b274b10d5a342b338669c320256ba7f80768a3a735e305dc86e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3da3b0e649d22c9fc037f707206a207dcdd7756dd39ba7553dad35c4038c15e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:56:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:56:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3da3b0e649d22c9fc037f707206a207dcdd7756dd39ba7553dad35c4038c15e5"} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d0b483b2f9a3fc398a0c417e830af858a56834479e051063630b30126e0bf1f"} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3da3b0e649d22c9fc037f707206a207dcdd7756dd39ba7553dad35c4038c15e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d0b483b2f9a3fc398a0c417e830af858a56834479e051063630b30126e0bf1f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:56:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:56:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d0b483b2f9a3fc398a0c417e830af858a56834479e051063630b30126e0bf1f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3da3b0e649d22c9fc037f707206a207dcdd7756dd39ba7553dad35c4038c15e5"} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d0b483b2f9a3fc398a0c417e830af858a56834479e051063630b30126e0bf1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3da3b0e649d22c9fc037f707206a207dcdd7756dd39ba7553dad35c4038c15e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:56:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:56:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3da3b0e649d22c9fc037f707206a207dcdd7756dd39ba7553dad35c4038c15e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d0b483b2f9a3fc398a0c417e830af858a56834479e051063630b30126e0bf1f"} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3da3b0e649d22c9fc037f707206a207dcdd7756dd39ba7553dad35c4038c15e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d0b483b2f9a3fc398a0c417e830af858a56834479e051063630b30126e0bf1f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3da3b0e649d22c9fc037f707206a207dcdd7756dd39ba7553dad35c4038c15e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:56:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:56:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3da3b0e649d22c9fc037f707206a207dcdd7756dd39ba7553dad35c4038c15e5"} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3da3b0e649d22c9fc037f707206a207dcdd7756dd39ba7553dad35c4038c15e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c876cfa1994cc267cf336b03737c2d9554881c2b5e1e13b1b4dfcfd471a33947","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:56:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:56:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c876cfa1994cc267cf336b03737c2d9554881c2b5e1e13b1b4dfcfd471a33947"} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3da3b0e649d22c9fc037f707206a207dcdd7756dd39ba7553dad35c4038c15e5"} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c876cfa1994cc267cf336b03737c2d9554881c2b5e1e13b1b4dfcfd471a33947","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3da3b0e649d22c9fc037f707206a207dcdd7756dd39ba7553dad35c4038c15e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:56:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:56:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3da3b0e649d22c9fc037f707206a207dcdd7756dd39ba7553dad35c4038c15e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c876cfa1994cc267cf336b03737c2d9554881c2b5e1e13b1b4dfcfd471a33947"} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3da3b0e649d22c9fc037f707206a207dcdd7756dd39ba7553dad35c4038c15e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c876cfa1994cc267cf336b03737c2d9554881c2b5e1e13b1b4dfcfd471a33947","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:56:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:56:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c876cfa1994cc267cf336b03737c2d9554881c2b5e1e13b1b4dfcfd471a33947"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3da3b0e649d22c9fc037f707206a207dcdd7756dd39ba7553dad35c4038c15e5"} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c876cfa1994cc267cf336b03737c2d9554881c2b5e1e13b1b4dfcfd471a33947","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3da3b0e649d22c9fc037f707206a207dcdd7756dd39ba7553dad35c4038c15e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c876cfa1994cc267cf336b03737c2d9554881c2b5e1e13b1b4dfcfd471a33947","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:56:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:56:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c876cfa1994cc267cf336b03737c2d9554881c2b5e1e13b1b4dfcfd471a33947"} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c876cfa1994cc267cf336b03737c2d9554881c2b5e1e13b1b4dfcfd471a33947","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82b8cf0b83baa1c2307b87d3841e264c4555f92abc2306bac2d740275a9f35bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:56:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:56:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82b8cf0b83baa1c2307b87d3841e264c4555f92abc2306bac2d740275a9f35bc"} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c876cfa1994cc267cf336b03737c2d9554881c2b5e1e13b1b4dfcfd471a33947"} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82b8cf0b83baa1c2307b87d3841e264c4555f92abc2306bac2d740275a9f35bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c876cfa1994cc267cf336b03737c2d9554881c2b5e1e13b1b4dfcfd471a33947","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:56:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:56:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c876cfa1994cc267cf336b03737c2d9554881c2b5e1e13b1b4dfcfd471a33947"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3284bc2af4c25b95653e9939c677f7704fe3f2b78925ce4f5fc3be503069f1dc"} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82b8cf0b83baa1c2307b87d3841e264c4555f92abc2306bac2d740275a9f35bc"} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c876cfa1994cc267cf336b03737c2d9554881c2b5e1e13b1b4dfcfd471a33947","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3284bc2af4c25b95653e9939c677f7704fe3f2b78925ce4f5fc3be503069f1dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:56:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:56:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3284bc2af4c25b95653e9939c677f7704fe3f2b78925ce4f5fc3be503069f1dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c876cfa1994cc267cf336b03737c2d9554881c2b5e1e13b1b4dfcfd471a33947"} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3284bc2af4c25b95653e9939c677f7704fe3f2b78925ce4f5fc3be503069f1dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"82b8cf0b83baa1c2307b87d3841e264c4555f92abc2306bac2d740275a9f35bc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:56:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:56:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["82b8cf0b83baa1c2307b87d3841e264c4555f92abc2306bac2d740275a9f35bc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/536933e44c704d90710a15c9eaf8569ae1f1ef34ff996adc1e3f5ab37a646cea"} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c46e5bc5caffc34c8e9d5bba0eb2c5053f5160b16af26c91b846e8ce49bb739"} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d49f1dede69a376af13b2bfce80277f03ffa9bd0e545aa1faa8086426b50d9f6"} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"82b8cf0b83baa1c2307b87d3841e264c4555f92abc2306bac2d740275a9f35bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:56:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:56:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3284bc2af4c25b95653e9939c677f7704fe3f2b78925ce4f5fc3be503069f1dc"} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb0a4e0217cfdbd7728688846caba4be80dd24a29d872eb13f7cd145e15db7dd"} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c876cfa1994cc267cf336b03737c2d9554881c2b5e1e13b1b4dfcfd471a33947","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"536933e44c704d90710a15c9eaf8569ae1f1ef34ff996adc1e3f5ab37a646cea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:56:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:56:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["536933e44c704d90710a15c9eaf8569ae1f1ef34ff996adc1e3f5ab37a646cea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/82b8cf0b83baa1c2307b87d3841e264c4555f92abc2306bac2d740275a9f35bc"} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e23c91df599540311dc58b27392b8e4ff98b9fe982c8797cf7fa24582494a95c"} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/594d5135573b6870d37256574e7383278116dd19b0b26a61f27005cb6ecbc2ce"} {"level":"info","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"536933e44c704d90710a15c9eaf8569ae1f1ef34ff996adc1e3f5ab37a646cea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c46e5bc5caffc34c8e9d5bba0eb2c5053f5160b16af26c91b846e8ce49bb739","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:56:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:56:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c46e5bc5caffc34c8e9d5bba0eb2c5053f5160b16af26c91b846e8ce49bb739"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a24ceaa99f7c63e95be28fa8736b82aa77f54214ca0125e375a55aee12afc06"} {"level":"info","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"} {"level":"info","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0b04d5a36f358c7448d5c15f4fca5594917b8e61b4781633cc35a79a1074487"} {"level":"info","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c46e5bc5caffc34c8e9d5bba0eb2c5053f5160b16af26c91b846e8ce49bb739","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d49f1dede69a376af13b2bfce80277f03ffa9bd0e545aa1faa8086426b50d9f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:56:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:56:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d49f1dede69a376af13b2bfce80277f03ffa9bd0e545aa1faa8086426b50d9f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/158ed14928350417c82ff7889e4e442234966147c88fa3ae502f4aa63bb9bce6"} {"level":"info","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/536933e44c704d90710a15c9eaf8569ae1f1ef34ff996adc1e3f5ab37a646cea"} {"level":"info","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d49f1dede69a376af13b2bfce80277f03ffa9bd0e545aa1faa8086426b50d9f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3284bc2af4c25b95653e9939c677f7704fe3f2b78925ce4f5fc3be503069f1dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb0a4e0217cfdbd7728688846caba4be80dd24a29d872eb13f7cd145e15db7dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:56:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:56:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb0a4e0217cfdbd7728688846caba4be80dd24a29d872eb13f7cd145e15db7dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/895e9761ec8c72061d5e4073a3f8caa8966c96b1bca61e1d6de5ff99435f57b0"} {"level":"info","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c46e5bc5caffc34c8e9d5bba0eb2c5053f5160b16af26c91b846e8ce49bb739"} {"level":"info","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d49f1dede69a376af13b2bfce80277f03ffa9bd0e545aa1faa8086426b50d9f6"} {"level":"info","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb0a4e0217cfdbd7728688846caba4be80dd24a29d872eb13f7cd145e15db7dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"82b8cf0b83baa1c2307b87d3841e264c4555f92abc2306bac2d740275a9f35bc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e23c91df599540311dc58b27392b8e4ff98b9fe982c8797cf7fa24582494a95c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:56:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:56:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e23c91df599540311dc58b27392b8e4ff98b9fe982c8797cf7fa24582494a95c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb0a4e0217cfdbd7728688846caba4be80dd24a29d872eb13f7cd145e15db7dd"} {"level":"info","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e23c91df599540311dc58b27392b8e4ff98b9fe982c8797cf7fa24582494a95c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"594d5135573b6870d37256574e7383278116dd19b0b26a61f27005cb6ecbc2ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:56:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:56:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["594d5135573b6870d37256574e7383278116dd19b0b26a61f27005cb6ecbc2ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e23c91df599540311dc58b27392b8e4ff98b9fe982c8797cf7fa24582494a95c"} {"level":"info","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"594d5135573b6870d37256574e7383278116dd19b0b26a61f27005cb6ecbc2ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a24ceaa99f7c63e95be28fa8736b82aa77f54214ca0125e375a55aee12afc06","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:56:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:56:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a24ceaa99f7c63e95be28fa8736b82aa77f54214ca0125e375a55aee12afc06"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a24ceaa99f7c63e95be28fa8736b82aa77f54214ca0125e375a55aee12afc06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0b04d5a36f358c7448d5c15f4fca5594917b8e61b4781633cc35a79a1074487","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:56:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:56:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0b04d5a36f358c7448d5c15f4fca5594917b8e61b4781633cc35a79a1074487"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/594d5135573b6870d37256574e7383278116dd19b0b26a61f27005cb6ecbc2ce"} {"level":"info","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a24ceaa99f7c63e95be28fa8736b82aa77f54214ca0125e375a55aee12afc06"} {"level":"info","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0b04d5a36f358c7448d5c15f4fca5594917b8e61b4781633cc35a79a1074487","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"158ed14928350417c82ff7889e4e442234966147c88fa3ae502f4aa63bb9bce6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:56:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:56:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["158ed14928350417c82ff7889e4e442234966147c88fa3ae502f4aa63bb9bce6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0b04d5a36f358c7448d5c15f4fca5594917b8e61b4781633cc35a79a1074487"} {"level":"info","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"158ed14928350417c82ff7889e4e442234966147c88fa3ae502f4aa63bb9bce6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"536933e44c704d90710a15c9eaf8569ae1f1ef34ff996adc1e3f5ab37a646cea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"895e9761ec8c72061d5e4073a3f8caa8966c96b1bca61e1d6de5ff99435f57b0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:56:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:56:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["895e9761ec8c72061d5e4073a3f8caa8966c96b1bca61e1d6de5ff99435f57b0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/158ed14928350417c82ff7889e4e442234966147c88fa3ae502f4aa63bb9bce6"} {"level":"info","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"895e9761ec8c72061d5e4073a3f8caa8966c96b1bca61e1d6de5ff99435f57b0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c46e5bc5caffc34c8e9d5bba0eb2c5053f5160b16af26c91b846e8ce49bb739","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d49f1dede69a376af13b2bfce80277f03ffa9bd0e545aa1faa8086426b50d9f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb0a4e0217cfdbd7728688846caba4be80dd24a29d872eb13f7cd145e15db7dd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e23c91df599540311dc58b27392b8e4ff98b9fe982c8797cf7fa24582494a95c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594d5135573b6870d37256574e7383278116dd19b0b26a61f27005cb6ecbc2ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a24ceaa99f7c63e95be28fa8736b82aa77f54214ca0125e375a55aee12afc06","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0b04d5a36f358c7448d5c15f4fca5594917b8e61b4781633cc35a79a1074487","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"158ed14928350417c82ff7889e4e442234966147c88fa3ae502f4aa63bb9bce6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"895e9761ec8c72061d5e4073a3f8caa8966c96b1bca61e1d6de5ff99435f57b0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:56:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/895e9761ec8c72061d5e4073a3f8caa8966c96b1bca61e1d6de5ff99435f57b0"} {"level":"info","ts":"2026-07-26T15:57:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa1b8683-f355-4c8d-bd23-74d1aabc1096","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40390","PortSpecifier":{"PortValue":40390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fa1b8683-f355-4c8d-bd23-74d1aabc1096","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T15:57:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fa1b8683-f355-4c8d-bd23-74d1aabc1096","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40390","PortSpecifier":{"PortValue":40390}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081427,"nanos":146652012},"http":{"id":"fa1b8683-f355-4c8d-bd23-74d1aabc1096","method":"POST","headers":{":authority":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:57:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fa1b8683-f355-4c8d-bd23-74d1aabc1096","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T15:57:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fa1b8683-f355-4c8d-bd23-74d1aabc1096","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b176e956-e200-4ee7-9cdb-029b28c484d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2abb13a-f450-45d5-997e-e063425694e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/543c051bbd65"]}} {"level":"debug","ts":"2026-07-26T15:57:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fa1b8683-f355-4c8d-bd23-74d1aabc1096","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/543c051bbd65"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2abb13a-f450-45d5-997e-e063425694e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b176e956-e200-4ee7-9cdb-029b28c484d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d0b04d5a36f358c7448d5c15f4fca5594917b8e61b4781633cc35a79a1074487"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.74:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:57:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa1b8683-f355-4c8d-bd23-74d1aabc1096","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:57:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa1b8683-f355-4c8d-bd23-74d1aabc1096","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:57:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fa1b8683-f355-4c8d-bd23-74d1aabc1096","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a20d61/rate-test-model-a20d61\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a20d61/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:57:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fa1b8683-f355-4c8d-bd23-74d1aabc1096","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T15:57:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa1b8683-f355-4c8d-bd23-74d1aabc1096","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T15:57:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fa1b8683-f355-4c8d-bd23-74d1aabc1096","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T15:57:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa1b8683-f355-4c8d-bd23-74d1aabc1096","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T15:57:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fa1b8683-f355-4c8d-bd23-74d1aabc1096","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T15:57:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d81c9001-c069-4a17-b2e1-38a22b7aebf0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48880","PortSpecifier":{"PortValue":48880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d81c9001-c069-4a17-b2e1-38a22b7aebf0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-60c814.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T15:57:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d81c9001-c069-4a17-b2e1-38a22b7aebf0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:48880","PortSpecifier":{"PortValue":48880}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081427,"nanos":190923746},"http":{"id":"d81c9001-c069-4a17-b2e1-38a22b7aebf0","method":"POST","headers":{":authority":"e2e-shared-b-60c814.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:57:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d81c9001-c069-4a17-b2e1-38a22b7aebf0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T15:57:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d81c9001-c069-4a17-b2e1-38a22b7aebf0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b176e956-e200-4ee7-9cdb-029b28c484d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2abb13a-f450-45d5-997e-e063425694e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/543c051bbd65"]}} {"level":"debug","ts":"2026-07-26T15:57:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d81c9001-c069-4a17-b2e1-38a22b7aebf0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/543c051bbd65"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2abb13a-f450-45d5-997e-e063425694e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b176e956-e200-4ee7-9cdb-029b28c484d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-60c814.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:57:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d81c9001-c069-4a17-b2e1-38a22b7aebf0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:57:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d81c9001-c069-4a17-b2e1-38a22b7aebf0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:57:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d81c9001-c069-4a17-b2e1-38a22b7aebf0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-60c814/rate-test-model-60c814\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-60c814/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:57:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d81c9001-c069-4a17-b2e1-38a22b7aebf0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T15:57:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d81c9001-c069-4a17-b2e1-38a22b7aebf0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T15:57:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d81c9001-c069-4a17-b2e1-38a22b7aebf0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T15:57:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d81c9001-c069-4a17-b2e1-38a22b7aebf0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T15:57:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d81c9001-c069-4a17-b2e1-38a22b7aebf0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T15:57:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0064525a-1a71-4a62-974f-f093cb9955ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40400","PortSpecifier":{"PortValue":40400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0064525a-1a71-4a62-974f-f093cb9955ee","method":"POST","path":"/ai-tenant-e2e-shared-a-a20d61/rate-test-model-a20d61/v1/completions","host":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T15:57:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0064525a-1a71-4a62-974f-f093cb9955ee","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40400","PortSpecifier":{"PortValue":40400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081427,"nanos":233362420},"http":{"id":"0064525a-1a71-4a62-974f-f093cb9955ee","method":"POST","headers":{":authority":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a20d61/rate-test-model-a20d61/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:57:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0064525a-1a71-4a62-974f-f093cb9955ee","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RnNAkwgjUkMoUcE6_3fl7J69UFJ7tpaZQTmgkgOibhwUdMqVyXd8pSx29Ike"} {"level":"debug","ts":"2026-07-26T15:57:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0064525a-1a71-4a62-974f-f093cb9955ee","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a20d61.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RnNAkwgjUkMoUcE6_3fl7J69UFJ7tpaZQTmgkgOibhwUdMqVyXd8pSx29Ike\"}"} {"level":"debug","ts":"2026-07-26T15:57:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0064525a-1a71-4a62-974f-f093cb9955ee","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a20d61.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"46beea36-0ad7-4de8-b0c6-85fff3af82d1","keyName":"e2e-rate-a-df3f22","subscription":"e2e-rate-iso-a-df3f22","tenant":"e2e-shared-a-a20d61","userId":"46beea36-0ad7-4de8-b0c6-85fff3af82d1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T15:57:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0064525a-1a71-4a62-974f-f093cb9955ee","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a20d61.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a20d61/rate-test-model-a20d61\",\"requestedSubscription\":\"e2e-rate-iso-a-df3f22\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-26T15:57:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0064525a-1a71-4a62-974f-f093cb9955ee","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a20d61.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a20d61/models/facebook/opt-125m","name":"rate-test-model-a20d61","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-df3f22","namespace":"ai-tenant-e2e-shared-a-a20d61","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a20d61/rate-test-model-a20d61"}} {"level":"debug","ts":"2026-07-26T15:57:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0064525a-1a71-4a62-974f-f093cb9955ee","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:57:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0064525a-1a71-4a62-974f-f093cb9955ee","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:57:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0064525a-1a71-4a62-974f-f093cb9955ee","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:57:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0064525a-1a71-4a62-974f-f093cb9955ee","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a20d61/rate-test-model-a20d61\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a20d61/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:57:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0064525a-1a71-4a62-974f-f093cb9955ee","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:57:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0064525a-1a71-4a62-974f-f093cb9955ee","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-df3f22"} {"level":"debug","ts":"2026-07-26T15:57:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0064525a-1a71-4a62-974f-f093cb9955ee","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T15:57:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0064525a-1a71-4a62-974f-f093cb9955ee","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T15:57:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0064525a-1a71-4a62-974f-f093cb9955ee","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"46beea36-0ad7-4de8-b0c6-85fff3af82d1","keyName":"e2e-rate-a-df3f22","selected_subscription":"e2e-rate-iso-a-df3f22","selected_subscription_key":"ai-tenant-e2e-shared-a-a20d61/e2e-rate-iso-a-df3f22@ai-tenant-e2e-shared-a-a20d61/rate-test-model-a20d61","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a20d61/models/facebook/opt-125m","name":"rate-test-model-a20d61","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-df3f22","namespace":"ai-tenant-e2e-shared-a-a20d61","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a20d61/rate-test-model-a20d61"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-26T15:57:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0064525a-1a71-4a62-974f-f093cb9955ee","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T15:57:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0064525a-1a71-4a62-974f-f093cb9955ee","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T15:57:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8faaf334-5c8e-4c32-bd08-893f1b5fc72b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40402","PortSpecifier":{"PortValue":40402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8faaf334-5c8e-4c32-bd08-893f1b5fc72b","method":"POST","path":"/ai-tenant-e2e-shared-a-a20d61/rate-test-model-a20d61/v1/completions","host":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T15:57:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8faaf334-5c8e-4c32-bd08-893f1b5fc72b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40402","PortSpecifier":{"PortValue":40402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081428,"nanos":324944917},"http":{"id":"8faaf334-5c8e-4c32-bd08-893f1b5fc72b","method":"POST","headers":{":authority":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a20d61/rate-test-model-a20d61/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:57:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8faaf334-5c8e-4c32-bd08-893f1b5fc72b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RnNAkwgjUkMoUcE6_3fl7J69UFJ7tpaZQTmgkgOibhwUdMqVyXd8pSx29Ike"} {"level":"debug","ts":"2026-07-26T15:57:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8faaf334-5c8e-4c32-bd08-893f1b5fc72b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a20d61.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RnNAkwgjUkMoUcE6_3fl7J69UFJ7tpaZQTmgkgOibhwUdMqVyXd8pSx29Ike\"}"} {"level":"debug","ts":"2026-07-26T15:57:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8faaf334-5c8e-4c32-bd08-893f1b5fc72b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a20d61.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"46beea36-0ad7-4de8-b0c6-85fff3af82d1","keyName":"e2e-rate-a-df3f22","subscription":"e2e-rate-iso-a-df3f22","tenant":"e2e-shared-a-a20d61","userId":"46beea36-0ad7-4de8-b0c6-85fff3af82d1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T15:57:08Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8faaf334-5c8e-4c32-bd08-893f1b5fc72b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a20d61.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a20d61/rate-test-model-a20d61\",\"requestedSubscription\":\"e2e-rate-iso-a-df3f22\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-26T15:57:08Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8faaf334-5c8e-4c32-bd08-893f1b5fc72b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a20d61.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a20d61/models/facebook/opt-125m","name":"rate-test-model-a20d61","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-df3f22","namespace":"ai-tenant-e2e-shared-a-a20d61","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a20d61/rate-test-model-a20d61"}} {"level":"debug","ts":"2026-07-26T15:57:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8faaf334-5c8e-4c32-bd08-893f1b5fc72b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:57:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8faaf334-5c8e-4c32-bd08-893f1b5fc72b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:57:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8faaf334-5c8e-4c32-bd08-893f1b5fc72b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:57:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8faaf334-5c8e-4c32-bd08-893f1b5fc72b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a20d61/rate-test-model-a20d61\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a20d61/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:57:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8faaf334-5c8e-4c32-bd08-893f1b5fc72b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:57:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8faaf334-5c8e-4c32-bd08-893f1b5fc72b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T15:57:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8faaf334-5c8e-4c32-bd08-893f1b5fc72b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-df3f22"} {"level":"debug","ts":"2026-07-26T15:57:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8faaf334-5c8e-4c32-bd08-893f1b5fc72b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T15:57:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8faaf334-5c8e-4c32-bd08-893f1b5fc72b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"46beea36-0ad7-4de8-b0c6-85fff3af82d1","keyName":"e2e-rate-a-df3f22","selected_subscription":"e2e-rate-iso-a-df3f22","selected_subscription_key":"ai-tenant-e2e-shared-a-a20d61/e2e-rate-iso-a-df3f22@ai-tenant-e2e-shared-a-a20d61/rate-test-model-a20d61","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a20d61/models/facebook/opt-125m","name":"rate-test-model-a20d61","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-df3f22","namespace":"ai-tenant-e2e-shared-a-a20d61","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a20d61/rate-test-model-a20d61"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-26T15:57:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8faaf334-5c8e-4c32-bd08-893f1b5fc72b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T15:57:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8faaf334-5c8e-4c32-bd08-893f1b5fc72b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T15:57:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e8da9429-f2ee-47ec-b8c7-99d1f2ea56c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40414","PortSpecifier":{"PortValue":40414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e8da9429-f2ee-47ec-b8c7-99d1f2ea56c4","method":"POST","path":"/ai-tenant-e2e-shared-a-a20d61/rate-test-model-a20d61/v1/completions","host":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T15:57:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e8da9429-f2ee-47ec-b8c7-99d1f2ea56c4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40414","PortSpecifier":{"PortValue":40414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081429,"nanos":368368063},"http":{"id":"e8da9429-f2ee-47ec-b8c7-99d1f2ea56c4","method":"POST","headers":{":authority":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a20d61/rate-test-model-a20d61/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:57:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e8da9429-f2ee-47ec-b8c7-99d1f2ea56c4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RnNAkwgjUkMoUcE6_3fl7J69UFJ7tpaZQTmgkgOibhwUdMqVyXd8pSx29Ike"} {"level":"debug","ts":"2026-07-26T15:57:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e8da9429-f2ee-47ec-b8c7-99d1f2ea56c4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a20d61.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RnNAkwgjUkMoUcE6_3fl7J69UFJ7tpaZQTmgkgOibhwUdMqVyXd8pSx29Ike\"}"} {"level":"debug","ts":"2026-07-26T15:57:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e8da9429-f2ee-47ec-b8c7-99d1f2ea56c4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a20d61.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"46beea36-0ad7-4de8-b0c6-85fff3af82d1","keyName":"e2e-rate-a-df3f22","subscription":"e2e-rate-iso-a-df3f22","tenant":"e2e-shared-a-a20d61","userId":"46beea36-0ad7-4de8-b0c6-85fff3af82d1","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T15:57:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e8da9429-f2ee-47ec-b8c7-99d1f2ea56c4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a20d61.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a20d61/rate-test-model-a20d61\",\"requestedSubscription\":\"e2e-rate-iso-a-df3f22\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-26T15:57:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e8da9429-f2ee-47ec-b8c7-99d1f2ea56c4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a20d61.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a20d61/models/facebook/opt-125m","name":"rate-test-model-a20d61","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-df3f22","namespace":"ai-tenant-e2e-shared-a-a20d61","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a20d61/rate-test-model-a20d61"}} {"level":"debug","ts":"2026-07-26T15:57:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e8da9429-f2ee-47ec-b8c7-99d1f2ea56c4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:57:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8da9429-f2ee-47ec-b8c7-99d1f2ea56c4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:57:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8da9429-f2ee-47ec-b8c7-99d1f2ea56c4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:57:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8da9429-f2ee-47ec-b8c7-99d1f2ea56c4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a20d61/rate-test-model-a20d61\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a20d61/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:57:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e8da9429-f2ee-47ec-b8c7-99d1f2ea56c4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:57:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8da9429-f2ee-47ec-b8c7-99d1f2ea56c4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T15:57:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8da9429-f2ee-47ec-b8c7-99d1f2ea56c4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-df3f22"} {"level":"debug","ts":"2026-07-26T15:57:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8da9429-f2ee-47ec-b8c7-99d1f2ea56c4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T15:57:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e8da9429-f2ee-47ec-b8c7-99d1f2ea56c4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"46beea36-0ad7-4de8-b0c6-85fff3af82d1","keyName":"e2e-rate-a-df3f22","selected_subscription":"e2e-rate-iso-a-df3f22","selected_subscription_key":"ai-tenant-e2e-shared-a-a20d61/e2e-rate-iso-a-df3f22@ai-tenant-e2e-shared-a-a20d61/rate-test-model-a20d61","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a20d61/models/facebook/opt-125m","name":"rate-test-model-a20d61","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-df3f22","namespace":"ai-tenant-e2e-shared-a-a20d61","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a20d61/rate-test-model-a20d61"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-26T15:57:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e8da9429-f2ee-47ec-b8c7-99d1f2ea56c4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T15:57:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e8da9429-f2ee-47ec-b8c7-99d1f2ea56c4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T15:57:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ae8f275-8541-44f9-9920-d13eb3cbab56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43508","PortSpecifier":{"PortValue":43508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8ae8f275-8541-44f9-9920-d13eb3cbab56","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T15:57:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ae8f275-8541-44f9-9920-d13eb3cbab56","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43508","PortSpecifier":{"PortValue":43508}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081447,"nanos":498397764},"http":{"id":"8ae8f275-8541-44f9-9920-d13eb3cbab56","method":"POST","headers":{":authority":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:57:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8ae8f275-8541-44f9-9920-d13eb3cbab56","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T15:57:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8ae8f275-8541-44f9-9920-d13eb3cbab56","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b176e956-e200-4ee7-9cdb-029b28c484d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2abb13a-f450-45d5-997e-e063425694e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/543c051bbd65"]}} {"level":"debug","ts":"2026-07-26T15:57:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8ae8f275-8541-44f9-9920-d13eb3cbab56","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/543c051bbd65"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2abb13a-f450-45d5-997e-e063425694e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b176e956-e200-4ee7-9cdb-029b28c484d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d0b04d5a36f358c7448d5c15f4fca5594917b8e61b4781633cc35a79a1074487"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.74:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:57:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ae8f275-8541-44f9-9920-d13eb3cbab56","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:57:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ae8f275-8541-44f9-9920-d13eb3cbab56","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:57:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ae8f275-8541-44f9-9920-d13eb3cbab56","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a20d61/rate-test-model-a20d61\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a20d61/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:57:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8ae8f275-8541-44f9-9920-d13eb3cbab56","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T15:57:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ae8f275-8541-44f9-9920-d13eb3cbab56","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T15:57:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ae8f275-8541-44f9-9920-d13eb3cbab56","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T15:57:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ae8f275-8541-44f9-9920-d13eb3cbab56","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T15:57:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ae8f275-8541-44f9-9920-d13eb3cbab56","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T15:57:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"501e8cb9-c7f4-44af-8e99-f12cb2a48cc9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44550","PortSpecifier":{"PortValue":44550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"501e8cb9-c7f4-44af-8e99-f12cb2a48cc9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-60c814.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T15:57:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"501e8cb9-c7f4-44af-8e99-f12cb2a48cc9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44550","PortSpecifier":{"PortValue":44550}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081447,"nanos":538368625},"http":{"id":"501e8cb9-c7f4-44af-8e99-f12cb2a48cc9","method":"POST","headers":{":authority":"e2e-shared-b-60c814.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:57:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"501e8cb9-c7f4-44af-8e99-f12cb2a48cc9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T15:57:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"501e8cb9-c7f4-44af-8e99-f12cb2a48cc9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b176e956-e200-4ee7-9cdb-029b28c484d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2abb13a-f450-45d5-997e-e063425694e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/543c051bbd65"]}} {"level":"debug","ts":"2026-07-26T15:57:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"501e8cb9-c7f4-44af-8e99-f12cb2a48cc9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/543c051bbd65"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2abb13a-f450-45d5-997e-e063425694e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b176e956-e200-4ee7-9cdb-029b28c484d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-60c814.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:57:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"501e8cb9-c7f4-44af-8e99-f12cb2a48cc9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:57:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"501e8cb9-c7f4-44af-8e99-f12cb2a48cc9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:57:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"501e8cb9-c7f4-44af-8e99-f12cb2a48cc9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-60c814/rate-test-model-60c814\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-60c814/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:57:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"501e8cb9-c7f4-44af-8e99-f12cb2a48cc9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T15:57:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"501e8cb9-c7f4-44af-8e99-f12cb2a48cc9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T15:57:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"501e8cb9-c7f4-44af-8e99-f12cb2a48cc9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-26T15:57:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"501e8cb9-c7f4-44af-8e99-f12cb2a48cc9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T15:57:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"501e8cb9-c7f4-44af-8e99-f12cb2a48cc9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T15:57:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"14388ad0-89d3-4fed-82bb-b831aa80716a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43516","PortSpecifier":{"PortValue":43516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"14388ad0-89d3-4fed-82bb-b831aa80716a","method":"POST","path":"/ai-tenant-e2e-shared-a-a20d61/rate-test-model-a20d61/v1/completions","host":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T15:57:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"14388ad0-89d3-4fed-82bb-b831aa80716a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43516","PortSpecifier":{"PortValue":43516}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081447,"nanos":576373825},"http":{"id":"14388ad0-89d3-4fed-82bb-b831aa80716a","method":"POST","headers":{":authority":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a20d61/rate-test-model-a20d61/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:57:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"14388ad0-89d3-4fed-82bb-b831aa80716a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-om4qIo0try5KtFcW_WJfkrmfGAnwLOTlBFSqNnGRx1R9PrK30mYQowChkgk8"} {"level":"debug","ts":"2026-07-26T15:57:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"14388ad0-89d3-4fed-82bb-b831aa80716a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a20d61.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-om4qIo0try5KtFcW_WJfkrmfGAnwLOTlBFSqNnGRx1R9PrK30mYQowChkgk8\"}"} {"level":"debug","ts":"2026-07-26T15:57:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"14388ad0-89d3-4fed-82bb-b831aa80716a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a20d61.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"186d0d9d-a38a-4c8e-baf8-c59f3704056b","keyName":"e2e-rate-a-36720d","subscription":"e2e-rate-iso-a-36720d","tenant":"e2e-shared-a-a20d61","userId":"186d0d9d-a38a-4c8e-baf8-c59f3704056b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T15:57:27Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"14388ad0-89d3-4fed-82bb-b831aa80716a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a20d61.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a20d61/rate-test-model-a20d61\",\"requestedSubscription\":\"e2e-rate-iso-a-36720d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-26T15:57:27Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"14388ad0-89d3-4fed-82bb-b831aa80716a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a20d61.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a20d61/models/facebook/opt-125m","name":"rate-test-model-a20d61","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-36720d","namespace":"ai-tenant-e2e-shared-a-a20d61","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a20d61/rate-test-model-a20d61"}} {"level":"debug","ts":"2026-07-26T15:57:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"14388ad0-89d3-4fed-82bb-b831aa80716a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:57:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14388ad0-89d3-4fed-82bb-b831aa80716a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:57:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14388ad0-89d3-4fed-82bb-b831aa80716a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:57:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14388ad0-89d3-4fed-82bb-b831aa80716a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a20d61/rate-test-model-a20d61\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a20d61/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:57:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"14388ad0-89d3-4fed-82bb-b831aa80716a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:57:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14388ad0-89d3-4fed-82bb-b831aa80716a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T15:57:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14388ad0-89d3-4fed-82bb-b831aa80716a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T15:57:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14388ad0-89d3-4fed-82bb-b831aa80716a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-36720d"} {"level":"debug","ts":"2026-07-26T15:57:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"14388ad0-89d3-4fed-82bb-b831aa80716a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"186d0d9d-a38a-4c8e-baf8-c59f3704056b","keyName":"e2e-rate-a-36720d","selected_subscription":"e2e-rate-iso-a-36720d","selected_subscription_key":"ai-tenant-e2e-shared-a-a20d61/e2e-rate-iso-a-36720d@ai-tenant-e2e-shared-a-a20d61/rate-test-model-a20d61","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a20d61/models/facebook/opt-125m","name":"rate-test-model-a20d61","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-36720d","namespace":"ai-tenant-e2e-shared-a-a20d61","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a20d61/rate-test-model-a20d61"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-26T15:57:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"14388ad0-89d3-4fed-82bb-b831aa80716a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T15:57:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"14388ad0-89d3-4fed-82bb-b831aa80716a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T15:57:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2240dc9d-3a45-4d7c-b40e-498c28e8c42c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43524","PortSpecifier":{"PortValue":43524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2240dc9d-3a45-4d7c-b40e-498c28e8c42c","method":"POST","path":"/ai-tenant-e2e-shared-a-a20d61/rate-test-model-a20d61/v1/completions","host":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T15:57:28Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2240dc9d-3a45-4d7c-b40e-498c28e8c42c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43524","PortSpecifier":{"PortValue":43524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081448,"nanos":621299198},"http":{"id":"2240dc9d-3a45-4d7c-b40e-498c28e8c42c","method":"POST","headers":{":authority":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a20d61/rate-test-model-a20d61/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:57:28Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2240dc9d-3a45-4d7c-b40e-498c28e8c42c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-om4qIo0try5KtFcW_WJfkrmfGAnwLOTlBFSqNnGRx1R9PrK30mYQowChkgk8"} {"level":"debug","ts":"2026-07-26T15:57:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2240dc9d-3a45-4d7c-b40e-498c28e8c42c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a20d61.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-om4qIo0try5KtFcW_WJfkrmfGAnwLOTlBFSqNnGRx1R9PrK30mYQowChkgk8\"}"} {"level":"debug","ts":"2026-07-26T15:57:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2240dc9d-3a45-4d7c-b40e-498c28e8c42c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a20d61.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"186d0d9d-a38a-4c8e-baf8-c59f3704056b","keyName":"e2e-rate-a-36720d","subscription":"e2e-rate-iso-a-36720d","tenant":"e2e-shared-a-a20d61","userId":"186d0d9d-a38a-4c8e-baf8-c59f3704056b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T15:57:28Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2240dc9d-3a45-4d7c-b40e-498c28e8c42c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a20d61.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a20d61/rate-test-model-a20d61\",\"requestedSubscription\":\"e2e-rate-iso-a-36720d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-26T15:57:28Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2240dc9d-3a45-4d7c-b40e-498c28e8c42c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a20d61.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a20d61/models/facebook/opt-125m","name":"rate-test-model-a20d61","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-36720d","namespace":"ai-tenant-e2e-shared-a-a20d61","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a20d61/rate-test-model-a20d61"}} {"level":"debug","ts":"2026-07-26T15:57:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2240dc9d-3a45-4d7c-b40e-498c28e8c42c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:57:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2240dc9d-3a45-4d7c-b40e-498c28e8c42c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:57:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2240dc9d-3a45-4d7c-b40e-498c28e8c42c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:57:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2240dc9d-3a45-4d7c-b40e-498c28e8c42c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a20d61/rate-test-model-a20d61\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a20d61/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:57:28Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2240dc9d-3a45-4d7c-b40e-498c28e8c42c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:57:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2240dc9d-3a45-4d7c-b40e-498c28e8c42c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T15:57:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2240dc9d-3a45-4d7c-b40e-498c28e8c42c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-36720d"} {"level":"debug","ts":"2026-07-26T15:57:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2240dc9d-3a45-4d7c-b40e-498c28e8c42c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T15:57:28Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2240dc9d-3a45-4d7c-b40e-498c28e8c42c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"186d0d9d-a38a-4c8e-baf8-c59f3704056b","keyName":"e2e-rate-a-36720d","selected_subscription":"e2e-rate-iso-a-36720d","selected_subscription_key":"ai-tenant-e2e-shared-a-a20d61/e2e-rate-iso-a-36720d@ai-tenant-e2e-shared-a-a20d61/rate-test-model-a20d61","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a20d61/models/facebook/opt-125m","name":"rate-test-model-a20d61","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-36720d","namespace":"ai-tenant-e2e-shared-a-a20d61","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a20d61/rate-test-model-a20d61"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-26T15:57:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2240dc9d-3a45-4d7c-b40e-498c28e8c42c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T15:57:28Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2240dc9d-3a45-4d7c-b40e-498c28e8c42c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T15:57:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"335e5b9e-7237-42d2-a7bb-5733e7775540","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43528","PortSpecifier":{"PortValue":43528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"335e5b9e-7237-42d2-a7bb-5733e7775540","method":"POST","path":"/ai-tenant-e2e-shared-a-a20d61/rate-test-model-a20d61/v1/completions","host":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T15:57:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"335e5b9e-7237-42d2-a7bb-5733e7775540","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43528","PortSpecifier":{"PortValue":43528}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.74:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081449,"nanos":662186486},"http":{"id":"335e5b9e-7237-42d2-a7bb-5733e7775540","method":"POST","headers":{":authority":"e2e-shared-a-a20d61.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-a20d61/rate-test-model-a20d61/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:57:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"335e5b9e-7237-42d2-a7bb-5733e7775540","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-om4qIo0try5KtFcW_WJfkrmfGAnwLOTlBFSqNnGRx1R9PrK30mYQowChkgk8"} {"level":"debug","ts":"2026-07-26T15:57:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"335e5b9e-7237-42d2-a7bb-5733e7775540","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-a20d61.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-om4qIo0try5KtFcW_WJfkrmfGAnwLOTlBFSqNnGRx1R9PrK30mYQowChkgk8\"}"} {"level":"debug","ts":"2026-07-26T15:57:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"335e5b9e-7237-42d2-a7bb-5733e7775540","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a20d61.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"186d0d9d-a38a-4c8e-baf8-c59f3704056b","keyName":"e2e-rate-a-36720d","subscription":"e2e-rate-iso-a-36720d","tenant":"e2e-shared-a-a20d61","userId":"186d0d9d-a38a-4c8e-baf8-c59f3704056b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T15:57:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"335e5b9e-7237-42d2-a7bb-5733e7775540","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-a20d61.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-a20d61/rate-test-model-a20d61\",\"requestedSubscription\":\"e2e-rate-iso-a-36720d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-26T15:57:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"335e5b9e-7237-42d2-a7bb-5733e7775540","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-a20d61.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a20d61/models/facebook/opt-125m","name":"rate-test-model-a20d61","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-36720d","namespace":"ai-tenant-e2e-shared-a-a20d61","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a20d61/rate-test-model-a20d61"}} {"level":"debug","ts":"2026-07-26T15:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"335e5b9e-7237-42d2-a7bb-5733e7775540","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"335e5b9e-7237-42d2-a7bb-5733e7775540","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"335e5b9e-7237-42d2-a7bb-5733e7775540","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"335e5b9e-7237-42d2-a7bb-5733e7775540","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-a20d61/rate-test-model-a20d61\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-a20d61/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"335e5b9e-7237-42d2-a7bb-5733e7775540","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:57:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"335e5b9e-7237-42d2-a7bb-5733e7775540","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T15:57:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"335e5b9e-7237-42d2-a7bb-5733e7775540","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T15:57:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"335e5b9e-7237-42d2-a7bb-5733e7775540","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-36720d"} {"level":"debug","ts":"2026-07-26T15:57:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"335e5b9e-7237-42d2-a7bb-5733e7775540","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"186d0d9d-a38a-4c8e-baf8-c59f3704056b","keyName":"e2e-rate-a-36720d","selected_subscription":"e2e-rate-iso-a-36720d","selected_subscription_key":"ai-tenant-e2e-shared-a-a20d61/e2e-rate-iso-a-36720d@ai-tenant-e2e-shared-a-a20d61/rate-test-model-a20d61","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-a-a20d61/models/facebook/opt-125m","name":"rate-test-model-a20d61","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-36720d","namespace":"ai-tenant-e2e-shared-a-a20d61","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-a20d61/rate-test-model-a20d61"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-26T15:57:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"335e5b9e-7237-42d2-a7bb-5733e7775540","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T15:57:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"335e5b9e-7237-42d2-a7bb-5733e7775540","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T15:57:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9feb3dc-778b-404a-959d-e926f51cef39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58594","PortSpecifier":{"PortValue":58594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d9feb3dc-778b-404a-959d-e926f51cef39","method":"POST","path":"/ai-tenant-e2e-shared-b-60c814/rate-test-model-60c814/v1/completions","host":"e2e-shared-b-60c814.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T15:57:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9feb3dc-778b-404a-959d-e926f51cef39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:58594","PortSpecifier":{"PortValue":58594}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081449,"nanos":703328525},"http":{"id":"d9feb3dc-778b-404a-959d-e926f51cef39","method":"POST","headers":{":authority":"e2e-shared-b-60c814.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-60c814/rate-test-model-60c814/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:57:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d9feb3dc-778b-404a-959d-e926f51cef39","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1H6tmfactstk6gFa5_EzwpDAvagJrnGNl4Fk2j0oark040euyFffDjHqxhKLU"} {"level":"debug","ts":"2026-07-26T15:57:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d9feb3dc-778b-404a-959d-e926f51cef39","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-60c814.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1H6tmfactstk6gFa5_EzwpDAvagJrnGNl4Fk2j0oark040euyFffDjHqxhKLU\"}"} {"level":"debug","ts":"2026-07-26T15:57:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d9feb3dc-778b-404a-959d-e926f51cef39","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-60c814.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dc2a333d-15e1-44d3-b852-2cef962d1366","keyName":"e2e-rate-b-36720d","subscription":"e2e-rate-iso-b-36720d","tenant":"e2e-shared-b-60c814","userId":"dc2a333d-15e1-44d3-b852-2cef962d1366","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T15:57:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d9feb3dc-778b-404a-959d-e926f51cef39","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-60c814.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-60c814/rate-test-model-60c814\",\"requestedSubscription\":\"e2e-rate-iso-b-36720d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-26T15:57:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d9feb3dc-778b-404a-959d-e926f51cef39","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-60c814.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-60c814/models/facebook/opt-125m","name":"rate-test-model-60c814","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-36720d","namespace":"ai-tenant-e2e-shared-b-60c814","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-60c814/rate-test-model-60c814"}} {"level":"debug","ts":"2026-07-26T15:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d9feb3dc-778b-404a-959d-e926f51cef39","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9feb3dc-778b-404a-959d-e926f51cef39","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9feb3dc-778b-404a-959d-e926f51cef39","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9feb3dc-778b-404a-959d-e926f51cef39","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-60c814/rate-test-model-60c814\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-60c814/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:57:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9feb3dc-778b-404a-959d-e926f51cef39","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:57:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9feb3dc-778b-404a-959d-e926f51cef39","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-36720d"} {"level":"debug","ts":"2026-07-26T15:57:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9feb3dc-778b-404a-959d-e926f51cef39","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T15:57:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9feb3dc-778b-404a-959d-e926f51cef39","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T15:57:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9feb3dc-778b-404a-959d-e926f51cef39","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"dc2a333d-15e1-44d3-b852-2cef962d1366","keyName":"e2e-rate-b-36720d","selected_subscription":"e2e-rate-iso-b-36720d","selected_subscription_key":"ai-tenant-e2e-shared-b-60c814/e2e-rate-iso-b-36720d@ai-tenant-e2e-shared-b-60c814/rate-test-model-60c814","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-shared-b-60c814/models/facebook/opt-125m","name":"rate-test-model-60c814","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-36720d","namespace":"ai-tenant-e2e-shared-b-60c814","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-60c814/rate-test-model-60c814"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-26T15:57:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9feb3dc-778b-404a-959d-e926f51cef39","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T15:57:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9feb3dc-778b-404a-959d-e926f51cef39","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T15:57:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a24ceaa99f7c63e95be28fa8736b82aa77f54214ca0125e375a55aee12afc06"} {"level":"info","ts":"2026-07-26T15:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf540dda806e5203acd091000316e88a570a94e76959f17b08198510be740d14"} {"level":"info","ts":"2026-07-26T15:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3da3b0e649d22c9fc037f707206a207dcdd7756dd39ba7553dad35c4038c15e5"} {"level":"info","ts":"2026-07-26T15:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e05f023076dd0c0b51e5d51f8146b9b2d571757c36682ccaab2ac27c00ed7765"} {"level":"info","ts":"2026-07-26T15:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/82b8cf0b83baa1c2307b87d3841e264c4555f92abc2306bac2d740275a9f35bc"} {"level":"info","ts":"2026-07-26T15:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/536933e44c704d90710a15c9eaf8569ae1f1ef34ff996adc1e3f5ab37a646cea"} {"level":"info","ts":"2026-07-26T15:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d49f1dede69a376af13b2bfce80277f03ffa9bd0e545aa1faa8086426b50d9f6"} {"level":"info","ts":"2026-07-26T15:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c876cfa1994cc267cf336b03737c2d9554881c2b5e1e13b1b4dfcfd471a33947"} {"level":"info","ts":"2026-07-26T15:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/935e0fd83cf68aeedf469aa0b374513e8ef7708330d22ae93412986eefd4100b"} {"level":"info","ts":"2026-07-26T15:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a497f0e86df293d3ee58df2a03b2b32da7c8525b6a756fe159ad5c2adf9d0823"} {"level":"info","ts":"2026-07-26T15:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3284bc2af4c25b95653e9939c677f7704fe3f2b78925ce4f5fc3be503069f1dc"} {"level":"info","ts":"2026-07-26T15:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d0b483b2f9a3fc398a0c417e830af858a56834479e051063630b30126e0bf1f"} {"level":"info","ts":"2026-07-26T15:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/995ffa323552fe05c3a1ade31d5d39608c7d7a7153faf8e6605a599261a4abff"} {"level":"info","ts":"2026-07-26T15:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8fde862fd6365b274b10d5a342b338669c320256ba7f80768a3a735e305dc86e"} {"level":"info","ts":"2026-07-26T15:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e9ad15e3e783328c53fb48dc463dfd011863e3cad00d0435686349ef6c0e2e2"} {"level":"info","ts":"2026-07-26T15:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98ec84af7e6ff2cf459270e14259dce3ffe52ac597000d5a2552dba6b628b52c"} {"level":"info","ts":"2026-07-26T15:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/158ed14928350417c82ff7889e4e442234966147c88fa3ae502f4aa63bb9bce6"} {"level":"info","ts":"2026-07-26T15:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0b04d5a36f358c7448d5c15f4fca5594917b8e61b4781633cc35a79a1074487"} {"level":"info","ts":"2026-07-26T15:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/594d5135573b6870d37256574e7383278116dd19b0b26a61f27005cb6ecbc2ce"} {"level":"info","ts":"2026-07-26T15:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e23c91df599540311dc58b27392b8e4ff98b9fe982c8797cf7fa24582494a95c"} {"level":"info","ts":"2026-07-26T15:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d154c9794627496df55731901eebca50b68c27a1f00218c514b4d9db66cd0260"} {"level":"info","ts":"2026-07-26T15:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c46e5bc5caffc34c8e9d5bba0eb2c5053f5160b16af26c91b846e8ce49bb739"} {"level":"info","ts":"2026-07-26T15:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/895e9761ec8c72061d5e4073a3f8caa8966c96b1bca61e1d6de5ff99435f57b0"} {"level":"info","ts":"2026-07-26T15:57:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb0a4e0217cfdbd7728688846caba4be80dd24a29d872eb13f7cd145e15db7dd"} {"level":"info","ts":"2026-07-26T15:58:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8886ba4f-82fa-4498-859a-d1a71106998b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54236","PortSpecifier":{"PortValue":54236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8886ba4f-82fa-4498-859a-d1a71106998b","method":"POST","path":"/maas-api/v1/api-keys","host":"maas.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T15:58:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8886ba4f-82fa-4498-859a-d1a71106998b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54236","PortSpecifier":{"PortValue":54236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081512,"nanos":922867660},"http":{"id":"8886ba4f-82fa-4498-859a-d1a71106998b","method":"POST","headers":{":authority":"maas.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:58:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8886ba4f-82fa-4498-859a-d1a71106998b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T15:58:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8886ba4f-82fa-4498-859a-d1a71106998b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b176e956-e200-4ee7-9cdb-029b28c484d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2abb13a-f450-45d5-997e-e063425694e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/543c051bbd65"]}} {"level":"debug","ts":"2026-07-26T15:58:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8886ba4f-82fa-4498-859a-d1a71106998b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/543c051bbd65"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2abb13a-f450-45d5-997e-e063425694e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b176e956-e200-4ee7-9cdb-029b28c484d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b64d1d3a1a41de71c5b05aa58c2da5025409dfbb29fbaa63fe6a7b8fb71bf42e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:58:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8886ba4f-82fa-4498-859a-d1a71106998b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:58:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8886ba4f-82fa-4498-859a-d1a71106998b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:58:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8886ba4f-82fa-4498-859a-d1a71106998b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:58:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8886ba4f-82fa-4498-859a-d1a71106998b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T15:58:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8886ba4f-82fa-4498-859a-d1a71106998b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T15:58:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8886ba4f-82fa-4498-859a-d1a71106998b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T15:58:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8886ba4f-82fa-4498-859a-d1a71106998b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T15:58:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8886ba4f-82fa-4498-859a-d1a71106998b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T15:58:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7152025a-d30b-4178-ad4e-e73eca0fc283","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54250","PortSpecifier":{"PortValue":54250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7152025a-d30b-4178-ad4e-e73eca0fc283","method":"POST","path":"/llm/facebook-opt-125m-simulated/v1/chat/completions","host":"maas.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T15:58:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7152025a-d30b-4178-ad4e-e73eca0fc283","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54250","PortSpecifier":{"PortValue":54250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.39:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081512,"nanos":981700652},"http":{"id":"7152025a-d30b-4178-ad4e-e73eca0fc283","method":"POST","headers":{":authority":"maas.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:58:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7152025a-d30b-4178-ad4e-e73eca0fc283","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-NjqT4XOXUUu6GKDt_o8pF7a5FOYyLcTvdVUc7YWbeMExkVqaBNlKPhukralN"} {"level":"debug","ts":"2026-07-26T15:58:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7152025a-d30b-4178-ad4e-e73eca0fc283","config":"apiKeyValidation","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-NjqT4XOXUUu6GKDt_o8pF7a5FOYyLcTvdVUc7YWbeMExkVqaBNlKPhukralN\"}"} {"level":"debug","ts":"2026-07-26T15:58:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7152025a-d30b-4178-ad4e-e73eca0fc283","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"28c0d583-9260-4922-aa4a-36463cf5ee51","keyName":"e2e-ipp-default","subscription":"simulator-subscription","tenant":"models-as-a-service","userId":"28c0d583-9260-4922-aa4a-36463cf5ee51","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T15:58:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7152025a-d30b-4178-ad4e-e73eca0fc283","config":"subscription-info","method":"POST","url":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"llm/facebook-opt-125m-simulated\",\"requestedSubscription\":\"simulator-subscription\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-26T15:58:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7152025a-d30b-4178-ad4e-e73eca0fc283","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}} {"level":"debug","ts":"2026-07-26T15:58:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7152025a-d30b-4178-ad4e-e73eca0fc283","input":{"auth":{"identity":"Bearer **** subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"}}},"context":{"context_extensions":{"host":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.39:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"maas.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/llm/facebook-opt-125m-simulated/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7152025a-d30b-4178-ad4e-e73eca0fc283","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7152025a-d30b-4178-ad4e-e73eca0fc283","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7152025a-d30b-4178-ad4e-e73eca0fc283","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"llm/facebook-opt-125m-simulated\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"llm/premium-simulated-simulated-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]},\"publishers/llm/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/llm/models/facebook/opt-125m-premium\":{\"users\":[\"system:serviceaccount:premium-users-namespace:premium-service-account\"],\"groups\":[\"premium-user\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7152025a-d30b-4178-ad4e-e73eca0fc283","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7152025a-d30b-4178-ad4e-e73eca0fc283","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T15:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7152025a-d30b-4178-ad4e-e73eca0fc283","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"simulator-subscription"} {"level":"debug","ts":"2026-07-26T15:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7152025a-d30b-4178-ad4e-e73eca0fc283","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T15:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7152025a-d30b-4178-ad4e-e73eca0fc283","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"28c0d583-9260-4922-aa4a-36463cf5ee51","keyName":"e2e-ipp-default","selected_subscription":"simulator-subscription","selected_subscription_key":"models-as-a-service/simulator-subscription@llm/facebook-opt-125m-simulated","subscription_error":"","subscription_error_message":"","subscription_info":{"description":"Free-tier subscription with 100 tokens/min rate limit","displayName":"Simulator Subscription (Free)","modelRefs":[{"description":"A simulated OPT-125M model for free-tier testing","display_name":"Facebook OPT 125M (Simulated)","model_name":"publishers/llm/models/facebook/opt-125m","name":"facebook-opt-125m-simulated","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"simulator-subscription","namespace":"models-as-a-service","phase":"Active","priority":10,"ready":true,"resolvedModel":"llm/facebook-opt-125m-simulated"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-26T15:58:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7152025a-d30b-4178-ad4e-e73eca0fc283","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T15:58:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7152025a-d30b-4178-ad4e-e73eca0fc283","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e"} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e"} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9174317dfa6291cef7a501938c4dd067d6665fc6cd40fe742ccf4d2b328cfe8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e"} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9174317dfa6291cef7a501938c4dd067d6665fc6cd40fe742ccf4d2b328cfe8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9174317dfa6291cef7a501938c4dd067d6665fc6cd40fe742ccf4d2b328cfe8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9174317dfa6291cef7a501938c4dd067d6665fc6cd40fe742ccf4d2b328cfe8b"} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9174317dfa6291cef7a501938c4dd067d6665fc6cd40fe742ccf4d2b328cfe8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e"} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9174317dfa6291cef7a501938c4dd067d6665fc6cd40fe742ccf4d2b328cfe8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9174317dfa6291cef7a501938c4dd067d6665fc6cd40fe742ccf4d2b328cfe8b"} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9174317dfa6291cef7a501938c4dd067d6665fc6cd40fe742ccf4d2b328cfe8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9174317dfa6291cef7a501938c4dd067d6665fc6cd40fe742ccf4d2b328cfe8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e"} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9174317dfa6291cef7a501938c4dd067d6665fc6cd40fe742ccf4d2b328cfe8b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9174317dfa6291cef7a501938c4dd067d6665fc6cd40fe742ccf4d2b328cfe8b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e"} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9174317dfa6291cef7a501938c4dd067d6665fc6cd40fe742ccf4d2b328cfe8b"} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e"} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e"} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e"} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e"} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afbf516168f8b1d33a8f6d5e94609634e1ef1afedf56b9dd2b4654edfb0a2c73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afbf516168f8b1d33a8f6d5e94609634e1ef1afedf56b9dd2b4654edfb0a2c73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afbf516168f8b1d33a8f6d5e94609634e1ef1afedf56b9dd2b4654edfb0a2c73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afbf516168f8b1d33a8f6d5e94609634e1ef1afedf56b9dd2b4654edfb0a2c73"} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afbf516168f8b1d33a8f6d5e94609634e1ef1afedf56b9dd2b4654edfb0a2c73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afbf516168f8b1d33a8f6d5e94609634e1ef1afedf56b9dd2b4654edfb0a2c73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afbf516168f8b1d33a8f6d5e94609634e1ef1afedf56b9dd2b4654edfb0a2c73"} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"afbf516168f8b1d33a8f6d5e94609634e1ef1afedf56b9dd2b4654edfb0a2c73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["afbf516168f8b1d33a8f6d5e94609634e1ef1afedf56b9dd2b4654edfb0a2c73"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"afbf516168f8b1d33a8f6d5e94609634e1ef1afedf56b9dd2b4654edfb0a2c73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"afbf516168f8b1d33a8f6d5e94609634e1ef1afedf56b9dd2b4654edfb0a2c73","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e"} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/afbf516168f8b1d33a8f6d5e94609634e1ef1afedf56b9dd2b4654edfb0a2c73"} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ffee98e367c3fe0e3317ca32ebc16afb7a95e07e87332ad88b000e981095b94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ffee98e367c3fe0e3317ca32ebc16afb7a95e07e87332ad88b000e981095b94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ffee98e367c3fe0e3317ca32ebc16afb7a95e07e87332ad88b000e981095b94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ffee98e367c3fe0e3317ca32ebc16afb7a95e07e87332ad88b000e981095b94","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ffee98e367c3fe0e3317ca32ebc16afb7a95e07e87332ad88b000e981095b94"} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ffee98e367c3fe0e3317ca32ebc16afb7a95e07e87332ad88b000e981095b94","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ffee98e367c3fe0e3317ca32ebc16afb7a95e07e87332ad88b000e981095b94"} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ffee98e367c3fe0e3317ca32ebc16afb7a95e07e87332ad88b000e981095b94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ffee98e367c3fe0e3317ca32ebc16afb7a95e07e87332ad88b000e981095b94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ffee98e367c3fe0e3317ca32ebc16afb7a95e07e87332ad88b000e981095b94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ffee98e367c3fe0e3317ca32ebc16afb7a95e07e87332ad88b000e981095b94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ffee98e367c3fe0e3317ca32ebc16afb7a95e07e87332ad88b000e981095b94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd83b8a7c903655ec2189143e7c1321ae831920b389a254fd84b67659b731348","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd83b8a7c903655ec2189143e7c1321ae831920b389a254fd84b67659b731348","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ffee98e367c3fe0e3317ca32ebc16afb7a95e07e87332ad88b000e981095b94","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ffee98e367c3fe0e3317ca32ebc16afb7a95e07e87332ad88b000e981095b94"} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd83b8a7c903655ec2189143e7c1321ae831920b389a254fd84b67659b731348","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd83b8a7c903655ec2189143e7c1321ae831920b389a254fd84b67659b731348","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ffee98e367c3fe0e3317ca32ebc16afb7a95e07e87332ad88b000e981095b94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ffee98e367c3fe0e3317ca32ebc16afb7a95e07e87332ad88b000e981095b94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd83b8a7c903655ec2189143e7c1321ae831920b389a254fd84b67659b731348"} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ffee98e367c3fe0e3317ca32ebc16afb7a95e07e87332ad88b000e981095b94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd83b8a7c903655ec2189143e7c1321ae831920b389a254fd84b67659b731348","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd83b8a7c903655ec2189143e7c1321ae831920b389a254fd84b67659b731348"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd83b8a7c903655ec2189143e7c1321ae831920b389a254fd84b67659b731348","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ffee98e367c3fe0e3317ca32ebc16afb7a95e07e87332ad88b000e981095b94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ffee98e367c3fe0e3317ca32ebc16afb7a95e07e87332ad88b000e981095b94"} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ffee98e367c3fe0e3317ca32ebc16afb7a95e07e87332ad88b000e981095b94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd83b8a7c903655ec2189143e7c1321ae831920b389a254fd84b67659b731348","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd83b8a7c903655ec2189143e7c1321ae831920b389a254fd84b67659b731348","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ffee98e367c3fe0e3317ca32ebc16afb7a95e07e87332ad88b000e981095b94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ffee98e367c3fe0e3317ca32ebc16afb7a95e07e87332ad88b000e981095b94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd83b8a7c903655ec2189143e7c1321ae831920b389a254fd84b67659b731348"} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ffee98e367c3fe0e3317ca32ebc16afb7a95e07e87332ad88b000e981095b94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd83b8a7c903655ec2189143e7c1321ae831920b389a254fd84b67659b731348","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd83b8a7c903655ec2189143e7c1321ae831920b389a254fd84b67659b731348"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd83b8a7c903655ec2189143e7c1321ae831920b389a254fd84b67659b731348","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ffee98e367c3fe0e3317ca32ebc16afb7a95e07e87332ad88b000e981095b94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ffee98e367c3fe0e3317ca32ebc16afb7a95e07e87332ad88b000e981095b94"} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ffee98e367c3fe0e3317ca32ebc16afb7a95e07e87332ad88b000e981095b94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd83b8a7c903655ec2189143e7c1321ae831920b389a254fd84b67659b731348","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd83b8a7c903655ec2189143e7c1321ae831920b389a254fd84b67659b731348","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ffee98e367c3fe0e3317ca32ebc16afb7a95e07e87332ad88b000e981095b94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ffee98e367c3fe0e3317ca32ebc16afb7a95e07e87332ad88b000e981095b94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd83b8a7c903655ec2189143e7c1321ae831920b389a254fd84b67659b731348"} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ffee98e367c3fe0e3317ca32ebc16afb7a95e07e87332ad88b000e981095b94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd83b8a7c903655ec2189143e7c1321ae831920b389a254fd84b67659b731348","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd83b8a7c903655ec2189143e7c1321ae831920b389a254fd84b67659b731348"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd83b8a7c903655ec2189143e7c1321ae831920b389a254fd84b67659b731348","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ffee98e367c3fe0e3317ca32ebc16afb7a95e07e87332ad88b000e981095b94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ffee98e367c3fe0e3317ca32ebc16afb7a95e07e87332ad88b000e981095b94"} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ffee98e367c3fe0e3317ca32ebc16afb7a95e07e87332ad88b000e981095b94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd83b8a7c903655ec2189143e7c1321ae831920b389a254fd84b67659b731348","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd83b8a7c903655ec2189143e7c1321ae831920b389a254fd84b67659b731348","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ffee98e367c3fe0e3317ca32ebc16afb7a95e07e87332ad88b000e981095b94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ffee98e367c3fe0e3317ca32ebc16afb7a95e07e87332ad88b000e981095b94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd83b8a7c903655ec2189143e7c1321ae831920b389a254fd84b67659b731348"} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ffee98e367c3fe0e3317ca32ebc16afb7a95e07e87332ad88b000e981095b94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"838320d87f2e63b5827534d5ac942bc34c8cfc2ecb0766cadd30426cccb51307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"838320d87f2e63b5827534d5ac942bc34c8cfc2ecb0766cadd30426cccb51307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd83b8a7c903655ec2189143e7c1321ae831920b389a254fd84b67659b731348","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd83b8a7c903655ec2189143e7c1321ae831920b389a254fd84b67659b731348"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ffee98e367c3fe0e3317ca32ebc16afb7a95e07e87332ad88b000e981095b94"} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd83b8a7c903655ec2189143e7c1321ae831920b389a254fd84b67659b731348","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ffee98e367c3fe0e3317ca32ebc16afb7a95e07e87332ad88b000e981095b94","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"838320d87f2e63b5827534d5ac942bc34c8cfc2ecb0766cadd30426cccb51307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"838320d87f2e63b5827534d5ac942bc34c8cfc2ecb0766cadd30426cccb51307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd83b8a7c903655ec2189143e7c1321ae831920b389a254fd84b67659b731348","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"838320d87f2e63b5827534d5ac942bc34c8cfc2ecb0766cadd30426cccb51307","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/838320d87f2e63b5827534d5ac942bc34c8cfc2ecb0766cadd30426cccb51307"} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"838320d87f2e63b5827534d5ac942bc34c8cfc2ecb0766cadd30426cccb51307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["838320d87f2e63b5827534d5ac942bc34c8cfc2ecb0766cadd30426cccb51307"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"838320d87f2e63b5827534d5ac942bc34c8cfc2ecb0766cadd30426cccb51307","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"838320d87f2e63b5827534d5ac942bc34c8cfc2ecb0766cadd30426cccb51307","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd83b8a7c903655ec2189143e7c1321ae831920b389a254fd84b67659b731348"} {"level":"debug","ts":"2026-07-26T15:59:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69d5e19d4a61f9f29973869b62277f72ce1881ab7c77a1292232d3783c8f20ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69d5e19d4a61f9f29973869b62277f72ce1881ab7c77a1292232d3783c8f20ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69d5e19d4a61f9f29973869b62277f72ce1881ab7c77a1292232d3783c8f20ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69d5e19d4a61f9f29973869b62277f72ce1881ab7c77a1292232d3783c8f20ad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ffee98e367c3fe0e3317ca32ebc16afb7a95e07e87332ad88b000e981095b94"} {"level":"debug","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69d5e19d4a61f9f29973869b62277f72ce1881ab7c77a1292232d3783c8f20ad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/838320d87f2e63b5827534d5ac942bc34c8cfc2ecb0766cadd30426cccb51307"} {"level":"debug","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69d5e19d4a61f9f29973869b62277f72ce1881ab7c77a1292232d3783c8f20ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:59:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69d5e19d4a61f9f29973869b62277f72ce1881ab7c77a1292232d3783c8f20ad"} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69d5e19d4a61f9f29973869b62277f72ce1881ab7c77a1292232d3783c8f20ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69d5e19d4a61f9f29973869b62277f72ce1881ab7c77a1292232d3783c8f20ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69d5e19d4a61f9f29973869b62277f72ce1881ab7c77a1292232d3783c8f20ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69d5e19d4a61f9f29973869b62277f72ce1881ab7c77a1292232d3783c8f20ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c62fd7a509dc26562f96b550e8dd90eadf426a8e3bd2061023c0ab3b321d742","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69d5e19d4a61f9f29973869b62277f72ce1881ab7c77a1292232d3783c8f20ad"} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c62fd7a509dc26562f96b550e8dd90eadf426a8e3bd2061023c0ab3b321d742","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69d5e19d4a61f9f29973869b62277f72ce1881ab7c77a1292232d3783c8f20ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c62fd7a509dc26562f96b550e8dd90eadf426a8e3bd2061023c0ab3b321d742","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c62fd7a509dc26562f96b550e8dd90eadf426a8e3bd2061023c0ab3b321d742","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c62fd7a509dc26562f96b550e8dd90eadf426a8e3bd2061023c0ab3b321d742","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c62fd7a509dc26562f96b550e8dd90eadf426a8e3bd2061023c0ab3b321d742"} {"level":"error","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5c62fd7a509dc26562f96b550e8dd90eadf426a8e3bd2061023c0ab3b321d742","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5c62fd7a509dc26562f96b550e8dd90eadf426a8e3bd2061023c0ab3b321d742\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c62fd7a509dc26562f96b550e8dd90eadf426a8e3bd2061023c0ab3b321d742","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c62fd7a509dc26562f96b550e8dd90eadf426a8e3bd2061023c0ab3b321d742"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c62fd7a509dc26562f96b550e8dd90eadf426a8e3bd2061023c0ab3b321d742","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c62fd7a509dc26562f96b550e8dd90eadf426a8e3bd2061023c0ab3b321d742","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c62fd7a509dc26562f96b550e8dd90eadf426a8e3bd2061023c0ab3b321d742"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69d5e19d4a61f9f29973869b62277f72ce1881ab7c77a1292232d3783c8f20ad"} {"level":"error","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5c62fd7a509dc26562f96b550e8dd90eadf426a8e3bd2061023c0ab3b321d742","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5c62fd7a509dc26562f96b550e8dd90eadf426a8e3bd2061023c0ab3b321d742\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c62fd7a509dc26562f96b550e8dd90eadf426a8e3bd2061023c0ab3b321d742","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c62fd7a509dc26562f96b550e8dd90eadf426a8e3bd2061023c0ab3b321d742","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69d5e19d4a61f9f29973869b62277f72ce1881ab7c77a1292232d3783c8f20ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c62fd7a509dc26562f96b550e8dd90eadf426a8e3bd2061023c0ab3b321d742","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c62fd7a509dc26562f96b550e8dd90eadf426a8e3bd2061023c0ab3b321d742"} {"level":"error","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5c62fd7a509dc26562f96b550e8dd90eadf426a8e3bd2061023c0ab3b321d742","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5c62fd7a509dc26562f96b550e8dd90eadf426a8e3bd2061023c0ab3b321d742\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c62fd7a509dc26562f96b550e8dd90eadf426a8e3bd2061023c0ab3b321d742","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c62fd7a509dc26562f96b550e8dd90eadf426a8e3bd2061023c0ab3b321d742","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ac0f3a950b90af9681074a9b232a7eee37696f74917e567895ffcfadce3c4ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c62fd7a509dc26562f96b550e8dd90eadf426a8e3bd2061023c0ab3b321d742"} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ac0f3a950b90af9681074a9b232a7eee37696f74917e567895ffcfadce3c4ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7108803c35cc0f041f1dd2fa1f3d01c7f1f2b7f1cceb6f6921fbdae49ed0f7df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ac0f3a950b90af9681074a9b232a7eee37696f74917e567895ffcfadce3c4ef"} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7108803c35cc0f041f1dd2fa1f3d01c7f1f2b7f1cceb6f6921fbdae49ed0f7df"} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7108803c35cc0f041f1dd2fa1f3d01c7f1f2b7f1cceb6f6921fbdae49ed0f7df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ac0f3a950b90af9681074a9b232a7eee37696f74917e567895ffcfadce3c4ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ac0f3a950b90af9681074a9b232a7eee37696f74917e567895ffcfadce3c4ef"} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7108803c35cc0f041f1dd2fa1f3d01c7f1f2b7f1cceb6f6921fbdae49ed0f7df"} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ac0f3a950b90af9681074a9b232a7eee37696f74917e567895ffcfadce3c4ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7108803c35cc0f041f1dd2fa1f3d01c7f1f2b7f1cceb6f6921fbdae49ed0f7df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7108803c35cc0f041f1dd2fa1f3d01c7f1f2b7f1cceb6f6921fbdae49ed0f7df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/967bb1b1076cd7b33eca098c09be64b8f1b8e253b390f189e43fc6db0461e7aa"} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ac0f3a950b90af9681074a9b232a7eee37696f74917e567895ffcfadce3c4ef"} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7108803c35cc0f041f1dd2fa1f3d01c7f1f2b7f1cceb6f6921fbdae49ed0f7df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c62fd7a509dc26562f96b550e8dd90eadf426a8e3bd2061023c0ab3b321d742","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c62fd7a509dc26562f96b550e8dd90eadf426a8e3bd2061023c0ab3b321d742"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0e5f3d3c4f3424a00b1c4255c9b937a57d86d23785c0ea689d1b055b01b859c"} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7108803c35cc0f041f1dd2fa1f3d01c7f1f2b7f1cceb6f6921fbdae49ed0f7df"} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c62fd7a509dc26562f96b550e8dd90eadf426a8e3bd2061023c0ab3b321d742","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"967bb1b1076cd7b33eca098c09be64b8f1b8e253b390f189e43fc6db0461e7aa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["967bb1b1076cd7b33eca098c09be64b8f1b8e253b390f189e43fc6db0461e7aa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c62fd7a509dc26562f96b550e8dd90eadf426a8e3bd2061023c0ab3b321d742"} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"967bb1b1076cd7b33eca098c09be64b8f1b8e253b390f189e43fc6db0461e7aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ac0f3a950b90af9681074a9b232a7eee37696f74917e567895ffcfadce3c4ef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ac0f3a950b90af9681074a9b232a7eee37696f74917e567895ffcfadce3c4ef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/967bb1b1076cd7b33eca098c09be64b8f1b8e253b390f189e43fc6db0461e7aa"} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ac0f3a950b90af9681074a9b232a7eee37696f74917e567895ffcfadce3c4ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0e5f3d3c4f3424a00b1c4255c9b937a57d86d23785c0ea689d1b055b01b859c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0e5f3d3c4f3424a00b1c4255c9b937a57d86d23785c0ea689d1b055b01b859c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ac0f3a950b90af9681074a9b232a7eee37696f74917e567895ffcfadce3c4ef"} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0e5f3d3c4f3424a00b1c4255c9b937a57d86d23785c0ea689d1b055b01b859c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7108803c35cc0f041f1dd2fa1f3d01c7f1f2b7f1cceb6f6921fbdae49ed0f7df","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c62fd7a509dc26562f96b550e8dd90eadf426a8e3bd2061023c0ab3b321d742","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"967bb1b1076cd7b33eca098c09be64b8f1b8e253b390f189e43fc6db0461e7aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ac0f3a950b90af9681074a9b232a7eee37696f74917e567895ffcfadce3c4ef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0e5f3d3c4f3424a00b1c4255c9b937a57d86d23785c0ea689d1b055b01b859c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0e5f3d3c4f3424a00b1c4255c9b937a57d86d23785c0ea689d1b055b01b859c"} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0e5f3d3c4f3424a00b1c4255c9b937a57d86d23785c0ea689d1b055b01b859c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0e5f3d3c4f3424a00b1c4255c9b937a57d86d23785c0ea689d1b055b01b859c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0e5f3d3c4f3424a00b1c4255c9b937a57d86d23785c0ea689d1b055b01b859c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0e5f3d3c4f3424a00b1c4255c9b937a57d86d23785c0ea689d1b055b01b859c"} {"level":"debug","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0e5f3d3c4f3424a00b1c4255c9b937a57d86d23785c0ea689d1b055b01b859c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0e5f3d3c4f3424a00b1c4255c9b937a57d86d23785c0ea689d1b055b01b859c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0e5f3d3c4f3424a00b1c4255c9b937a57d86d23785c0ea689d1b055b01b859c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0e5f3d3c4f3424a00b1c4255c9b937a57d86d23785c0ea689d1b055b01b859c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0e5f3d3c4f3424a00b1c4255c9b937a57d86d23785c0ea689d1b055b01b859c"} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0e5f3d3c4f3424a00b1c4255c9b937a57d86d23785c0ea689d1b055b01b859c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0e5f3d3c4f3424a00b1c4255c9b937a57d86d23785c0ea689d1b055b01b859c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0e5f3d3c4f3424a00b1c4255c9b937a57d86d23785c0ea689d1b055b01b859c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0e5f3d3c4f3424a00b1c4255c9b937a57d86d23785c0ea689d1b055b01b859c"} {"level":"debug","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0e5f3d3c4f3424a00b1c4255c9b937a57d86d23785c0ea689d1b055b01b859c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0e5f3d3c4f3424a00b1c4255c9b937a57d86d23785c0ea689d1b055b01b859c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0e5f3d3c4f3424a00b1c4255c9b937a57d86d23785c0ea689d1b055b01b859c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0e5f3d3c4f3424a00b1c4255c9b937a57d86d23785c0ea689d1b055b01b859c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0e5f3d3c4f3424a00b1c4255c9b937a57d86d23785c0ea689d1b055b01b859c"} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0e5f3d3c4f3424a00b1c4255c9b937a57d86d23785c0ea689d1b055b01b859c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0e5f3d3c4f3424a00b1c4255c9b937a57d86d23785c0ea689d1b055b01b859c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0e5f3d3c4f3424a00b1c4255c9b937a57d86d23785c0ea689d1b055b01b859c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0e5f3d3c4f3424a00b1c4255c9b937a57d86d23785c0ea689d1b055b01b859c"} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0e5f3d3c4f3424a00b1c4255c9b937a57d86d23785c0ea689d1b055b01b859c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0e5f3d3c4f3424a00b1c4255c9b937a57d86d23785c0ea689d1b055b01b859c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-26T15:59:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0e5f3d3c4f3424a00b1c4255c9b937a57d86d23785c0ea689d1b055b01b859c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0e5f3d3c4f3424a00b1c4255c9b937a57d86d23785c0ea689d1b055b01b859c"} {"level":"error","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a0e5f3d3c4f3424a00b1c4255c9b937a57d86d23785c0ea689d1b055b01b859c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a0e5f3d3c4f3424a00b1c4255c9b937a57d86d23785c0ea689d1b055b01b859c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0e5f3d3c4f3424a00b1c4255c9b937a57d86d23785c0ea689d1b055b01b859c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-26T15:59:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0e5f3d3c4f3424a00b1c4255c9b937a57d86d23785c0ea689d1b055b01b859c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-26T15:59:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6579e671-024a-400b-8224-ecc8fdd4541c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41990","PortSpecifier":{"PortValue":41990}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.84:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6579e671-024a-400b-8224-ecc8fdd4541c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-ipp-a-d57e1d.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T15:59:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6579e671-024a-400b-8224-ecc8fdd4541c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41990","PortSpecifier":{"PortValue":41990}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.84:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081571,"nanos":89787053},"http":{"id":"6579e671-024a-400b-8224-ecc8fdd4541c","method":"POST","headers":{":authority":"e2e-ipp-a-d57e1d.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:59:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6579e671-024a-400b-8224-ecc8fdd4541c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-26T15:59:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6579e671-024a-400b-8224-ecc8fdd4541c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"b176e956-e200-4ee7-9cdb-029b28c484d9","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2abb13a-f450-45d5-997e-e063425694e9"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/543c051bbd65"]}} {"level":"debug","ts":"2026-07-26T15:59:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6579e671-024a-400b-8224-ecc8fdd4541c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/543c051bbd65"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d2abb13a-f450-45d5-997e-e063425694e9"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"b176e956-e200-4ee7-9cdb-029b28c484d9","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"fd83b8a7c903655ec2189143e7c1321ae831920b389a254fd84b67659b731348"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.84:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-ipp-a-d57e1d.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:59:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6579e671-024a-400b-8224-ecc8fdd4541c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:59:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6579e671-024a-400b-8224-ecc8fdd4541c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:59:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6579e671-024a-400b-8224-ecc8fdd4541c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-d57e1d/ipp-route-d57e1d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-d57e1d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:59:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6579e671-024a-400b-8224-ecc8fdd4541c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-26T15:59:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6579e671-024a-400b-8224-ecc8fdd4541c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T15:59:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6579e671-024a-400b-8224-ecc8fdd4541c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-26T15:59:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6579e671-024a-400b-8224-ecc8fdd4541c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T15:59:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6579e671-024a-400b-8224-ecc8fdd4541c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T15:59:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c93af78-583c-4730-9dbf-1ac8fa6e4c9b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41992","PortSpecifier":{"PortValue":41992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.84:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3c93af78-583c-4730-9dbf-1ac8fa6e4c9b","method":"POST","path":"/ai-tenant-e2e-ipp-a-d57e1d/ipp-route-d57e1d/v1/chat/completions","host":"e2e-ipp-a-d57e1d.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-26T15:59:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3c93af78-583c-4730-9dbf-1ac8fa6e4c9b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41992","PortSpecifier":{"PortValue":41992}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.84:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1785081573,"nanos":156954337},"http":{"id":"3c93af78-583c-4730-9dbf-1ac8fa6e4c9b","method":"POST","headers":{":authority":"e2e-ipp-a-d57e1d.apps.cd3025e5-5e66-4246-a677-543c051bbd65.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-ipp-a-d57e1d/ipp-route-d57e1d/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:59:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3c93af78-583c-4730-9dbf-1ac8fa6e4c9b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11d7ImEnJB1nVwWoU_mgq2ISREGpav8ueDdMCg5opHc2C5yBGDfUva1gVvoOH"} {"level":"debug","ts":"2026-07-26T15:59:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3c93af78-583c-4730-9dbf-1ac8fa6e4c9b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-ipp-a-d57e1d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11d7ImEnJB1nVwWoU_mgq2ISREGpav8ueDdMCg5opHc2C5yBGDfUva1gVvoOH\"}"} {"level":"debug","ts":"2026-07-26T15:59:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3c93af78-583c-4730-9dbf-1ac8fa6e4c9b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-d57e1d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b0662a27-864d-4af8-89de-d702510982f8","keyName":"e2e-ipp-d57e1d","subscription":"ipp-route-d57e1d-sub","tenant":"e2e-ipp-a-d57e1d","userId":"b0662a27-864d-4af8-89de-d702510982f8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-26T15:59:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3c93af78-583c-4730-9dbf-1ac8fa6e4c9b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-ipp-a-d57e1d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-ipp-a-d57e1d/ipp-route-d57e1d\",\"requestedSubscription\":\"ipp-route-d57e1d-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-26T15:59:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3c93af78-583c-4730-9dbf-1ac8fa6e4c9b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-ipp-a-d57e1d.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-d57e1d/models/facebook/opt-125m","name":"ipp-route-d57e1d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-d57e1d-sub","namespace":"ai-tenant-e2e-ipp-a-d57e1d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-d57e1d/ipp-route-d57e1d"}} {"level":"debug","ts":"2026-07-26T15:59:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3c93af78-583c-4730-9dbf-1ac8fa6e4c9b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-26T15:59:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c93af78-583c-4730-9dbf-1ac8fa6e4c9b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:59:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c93af78-583c-4730-9dbf-1ac8fa6e4c9b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:59:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c93af78-583c-4730-9dbf-1ac8fa6e4c9b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-ipp-a-d57e1d/ipp-route-d57e1d\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-ipp-a-d57e1d/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:59:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3c93af78-583c-4730-9dbf-1ac8fa6e4c9b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-26T15:59:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c93af78-583c-4730-9dbf-1ac8fa6e4c9b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-26T15:59:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c93af78-583c-4730-9dbf-1ac8fa6e4c9b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"ipp-route-d57e1d-sub"} {"level":"debug","ts":"2026-07-26T15:59:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c93af78-583c-4730-9dbf-1ac8fa6e4c9b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-26T15:59:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3c93af78-583c-4730-9dbf-1ac8fa6e4c9b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b0662a27-864d-4af8-89de-d702510982f8","keyName":"e2e-ipp-d57e1d","selected_subscription":"ipp-route-d57e1d-sub","selected_subscription_key":"ai-tenant-e2e-ipp-a-d57e1d/ipp-route-d57e1d-sub@ai-tenant-e2e-ipp-a-d57e1d/ipp-route-d57e1d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"model_name":"publishers/ai-tenant-e2e-ipp-a-d57e1d/models/facebook/opt-125m","name":"ipp-route-d57e1d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"ipp-route-d57e1d-sub","namespace":"ai-tenant-e2e-ipp-a-d57e1d","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-ipp-a-d57e1d/ipp-route-d57e1d"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-26T15:59:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c93af78-583c-4730-9dbf-1ac8fa6e4c9b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-26T15:59:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3c93af78-583c-4730-9dbf-1ac8fa6e4c9b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-26T16:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5c62fd7a509dc26562f96b550e8dd90eadf426a8e3bd2061023c0ab3b321d742"} {"level":"info","ts":"2026-07-26T16:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69d5e19d4a61f9f29973869b62277f72ce1881ab7c77a1292232d3783c8f20ad"} {"level":"info","ts":"2026-07-26T16:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd83b8a7c903655ec2189143e7c1321ae831920b389a254fd84b67659b731348"} {"level":"info","ts":"2026-07-26T16:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7108803c35cc0f041f1dd2fa1f3d01c7f1f2b7f1cceb6f6921fbdae49ed0f7df"} {"level":"info","ts":"2026-07-26T16:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ffee98e367c3fe0e3317ca32ebc16afb7a95e07e87332ad88b000e981095b94"} {"level":"info","ts":"2026-07-26T16:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/838320d87f2e63b5827534d5ac942bc34c8cfc2ecb0766cadd30426cccb51307"} {"level":"info","ts":"2026-07-26T16:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/afbf516168f8b1d33a8f6d5e94609634e1ef1afedf56b9dd2b4654edfb0a2c73"} {"level":"info","ts":"2026-07-26T16:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0e5f3d3c4f3424a00b1c4255c9b937a57d86d23785c0ea689d1b055b01b859c"} {"level":"info","ts":"2026-07-26T16:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ac0f3a950b90af9681074a9b232a7eee37696f74917e567895ffcfadce3c4ef"} {"level":"info","ts":"2026-07-26T16:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/967bb1b1076cd7b33eca098c09be64b8f1b8e253b390f189e43fc6db0461e7aa"} {"level":"info","ts":"2026-07-26T16:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9174317dfa6291cef7a501938c4dd067d6665fc6cd40fe742ccf4d2b328cfe8b"} {"level":"info","ts":"2026-07-26T16:00:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/95bfa87120c3d292caadb72559b3a04600116639d048ad3119d9b79c3e61785e"}