--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"debug","ts":"2026-07-06T18:25:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f2a0819-a626-4a3c-86c8-00e88fbc4fb0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:25:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2f2a0819-a626-4a3c-86c8-00e88fbc4fb0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:25:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f2a0819-a626-4a3c-86c8-00e88fbc4fb0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:25:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2f2a0819-a626-4a3c-86c8-00e88fbc4fb0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:25:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2735a49c-457c-46ff-9089-d8a4e085f300","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43428","PortSpecifier":{"PortValue":43428}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2735a49c-457c-46ff-9089-d8a4e085f300","method":"POST","path":"/ai-tenant-e2e-inf-b-cd9691/test-model-cd9691/v1/chat/completions","host":"e2e-inf-b-cd9691.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:25:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2735a49c-457c-46ff-9089-d8a4e085f300","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:43428","PortSpecifier":{"PortValue":43428}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.50:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362315,"nanos":632920956},"http":{"id":"2735a49c-457c-46ff-9089-d8a4e085f300","method":"POST","headers":{":authority":"e2e-inf-b-cd9691.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-cd9691/test-model-cd9691/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:25:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2735a49c-457c-46ff-9089-d8a4e085f300","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Ku5m9tbgz0NYwdmi_hboFKGCREOVhhUMAEEkZSThQrZKcZ0famXawzXNfCZB"} {"level":"debug","ts":"2026-07-06T18:25:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2735a49c-457c-46ff-9089-d8a4e085f300","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-b-cd9691.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Ku5m9tbgz0NYwdmi_hboFKGCREOVhhUMAEEkZSThQrZKcZ0famXawzXNfCZB\"}"} {"level":"debug","ts":"2026-07-06T18:25:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2735a49c-457c-46ff-9089-d8a4e085f300","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-cd9691.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-06T18:25:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"2735a49c-457c-46ff-9089-d8a4e085f300","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-cd9691.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"} {"level":"debug","ts":"2026-07-06T18:25:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2735a49c-457c-46ff-9089-d8a4e085f300","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"9972a07b972edcab39cb0aec73c71dd59ad0a724dbf279d33c6c5b6c7a3f8255"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.50:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-b-cd9691.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-cd9691/test-model-cd9691/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:25:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2735a49c-457c-46ff-9089-d8a4e085f300","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:25:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"2735a49c-457c-46ff-9089-d8a4e085f300","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-06T18:25:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2735a49c-457c-46ff-9089-d8a4e085f300","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-06T18:25:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2735a49c-457c-46ff-9089-d8a4e085f300","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-06T18:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9972a07b972edcab39cb0aec73c71dd59ad0a724dbf279d33c6c5b6c7a3f8255"} {"level":"info","ts":"2026-07-06T18:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9895fbd454194c63a5bced19c1d71710ec8a0db11231b72c6649327288990011"} {"level":"info","ts":"2026-07-06T18:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/129115c1ac24c314ed579212e55c93f6b9fd6b1125c6a311f01869f74fbca248"} {"level":"info","ts":"2026-07-06T18:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8568c1d90fd9a0524c14e074e5961952c59de8befabe71e2024befe5212a7134"} {"level":"info","ts":"2026-07-06T18:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4750e0e0b3737d56c1cffa0995b1f15a73a24a3b2effc6ca8f49211ebfc45a3"} {"level":"info","ts":"2026-07-06T18:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f723e7e66dcf81301bca42cd703af6f544cca9852bba12b1280ea21ee614012"} {"level":"info","ts":"2026-07-06T18:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5a2867d212f7b8d2dfdbfa6a5dfc89d5aca1c286f61024c4001e78fe80370601"} {"level":"info","ts":"2026-07-06T18:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67d0beaa7a260d894e876deebbd18fb26e9da6abd3da7e8e382c19c37209951a"} {"level":"info","ts":"2026-07-06T18:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e3ad6276eb91041b80c5227108a66e0aeaf66632df67cb1b71dfb2f8fecf8cdf"} {"level":"info","ts":"2026-07-06T18:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c9be08fa17965615c9e0cec0cec8d366a2785374407eb757070392dc615dac2b"} {"level":"info","ts":"2026-07-06T18:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a32e76ab1f25f2796dd4f0e137eb68b50d40459ed8a8dca1d340ad52eaad8ff"} {"level":"info","ts":"2026-07-06T18:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8f210688a6ea315369488e012f3fa57b323a7baf028aa1e553c3bb38b7dd0c4"} {"level":"info","ts":"2026-07-06T18:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53b631bc021b3c8e19a9a1f8fc6ab62e6d9cc052e7771041b90059eeab955c1b"} {"level":"info","ts":"2026-07-06T18:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d1feb89b94e5a2e72a6bdb7a73e9aaa850b3cfc8d25715eaa937ca196c75081"} {"level":"info","ts":"2026-07-06T18:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/47b5bc0d6dcebc1fd35de9436aec7b0c3cb0a1b17011e6bae0a5d7d407c857ad"} {"level":"info","ts":"2026-07-06T18:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/35dcb93394d5e660260d036d242af6a99b0de0afd77c11ad7e5bbb0f0b467e51"} {"level":"info","ts":"2026-07-06T18:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0f263b25731ef16e798b66538e08b75feebb9e00961908c017892a11d40ca146"} {"level":"info","ts":"2026-07-06T18:25:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1677f2691c98edc0e9e00edf896a88c5e90d5c7e40293378541c40090e935011"} {"level":"info","ts":"2026-07-06T18:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9c9786bd214e886048a25f7dc09be3e877fc84cc7746b08bb016aada194d99bc"} {"level":"info","ts":"2026-07-06T18:26:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/93881ea4e65282da50d7fc9cdab908e140f5c6808297892fff7c337f41861e11"} {"level":"debug","ts":"2026-07-06T18:26:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aee5265a8c303186931446a5b5e0715de330a20ad06d096263661e0502b852f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:26:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:26:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:26:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aee5265a8c303186931446a5b5e0715de330a20ad06d096263661e0502b852f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:26:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aee5265a8c303186931446a5b5e0715de330a20ad06d096263661e0502b852f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:26:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aee5265a8c303186931446a5b5e0715de330a20ad06d096263661e0502b852f7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:26:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aee5265a8c303186931446a5b5e0715de330a20ad06d096263661e0502b852f7"} {"level":"debug","ts":"2026-07-06T18:26:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aee5265a8c303186931446a5b5e0715de330a20ad06d096263661e0502b852f7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:26:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aee5265a8c303186931446a5b5e0715de330a20ad06d096263661e0502b852f7"} {"level":"debug","ts":"2026-07-06T18:26:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aee5265a8c303186931446a5b5e0715de330a20ad06d096263661e0502b852f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:26:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:26:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aee5265a8c303186931446a5b5e0715de330a20ad06d096263661e0502b852f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:26:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aee5265a8c303186931446a5b5e0715de330a20ad06d096263661e0502b852f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:26:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aee5265a8c303186931446a5b5e0715de330a20ad06d096263661e0502b852f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:26:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:26:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:26:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aee5265a8c303186931446a5b5e0715de330a20ad06d096263661e0502b852f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:26:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aee5265a8c303186931446a5b5e0715de330a20ad06d096263661e0502b852f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:26:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aee5265a8c303186931446a5b5e0715de330a20ad06d096263661e0502b852f7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:26:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aee5265a8c303186931446a5b5e0715de330a20ad06d096263661e0502b852f7"} {"level":"debug","ts":"2026-07-06T18:26:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aee5265a8c303186931446a5b5e0715de330a20ad06d096263661e0502b852f7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:26:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aee5265a8c303186931446a5b5e0715de330a20ad06d096263661e0502b852f7"} {"level":"debug","ts":"2026-07-06T18:26:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aee5265a8c303186931446a5b5e0715de330a20ad06d096263661e0502b852f7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:26:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:26:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aee5265a8c303186931446a5b5e0715de330a20ad06d096263661e0502b852f7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:26:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aee5265a8c303186931446a5b5e0715de330a20ad06d096263661e0502b852f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:26:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669006cddaa3a7b1dd9a11f02e54c9dfdef6d90e242ea102fc7935e6d400ee41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:26:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:26:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:26:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669006cddaa3a7b1dd9a11f02e54c9dfdef6d90e242ea102fc7935e6d400ee41","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:26:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aee5265a8c303186931446a5b5e0715de330a20ad06d096263661e0502b852f7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:26:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"669006cddaa3a7b1dd9a11f02e54c9dfdef6d90e242ea102fc7935e6d400ee41","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:26:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669006cddaa3a7b1dd9a11f02e54c9dfdef6d90e242ea102fc7935e6d400ee41"} {"level":"debug","ts":"2026-07-06T18:26:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"669006cddaa3a7b1dd9a11f02e54c9dfdef6d90e242ea102fc7935e6d400ee41","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:26:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:26:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["669006cddaa3a7b1dd9a11f02e54c9dfdef6d90e242ea102fc7935e6d400ee41"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:26:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"669006cddaa3a7b1dd9a11f02e54c9dfdef6d90e242ea102fc7935e6d400ee41","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:26:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"669006cddaa3a7b1dd9a11f02e54c9dfdef6d90e242ea102fc7935e6d400ee41","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:26:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aee5265a8c303186931446a5b5e0715de330a20ad06d096263661e0502b852f7"} {"level":"info","ts":"2026-07-06T18:26:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/669006cddaa3a7b1dd9a11f02e54c9dfdef6d90e242ea102fc7935e6d400ee41"} {"level":"debug","ts":"2026-07-06T18:26:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a68674b873f46a60a22f3ded88e6cc8f64a89f7997ba6e7f4eba5ee33a546ba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:26:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:26:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:26:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a68674b873f46a60a22f3ded88e6cc8f64a89f7997ba6e7f4eba5ee33a546ba0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:26:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a68674b873f46a60a22f3ded88e6cc8f64a89f7997ba6e7f4eba5ee33a546ba0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:26:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a68674b873f46a60a22f3ded88e6cc8f64a89f7997ba6e7f4eba5ee33a546ba0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:26:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a68674b873f46a60a22f3ded88e6cc8f64a89f7997ba6e7f4eba5ee33a546ba0"} {"level":"debug","ts":"2026-07-06T18:26:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a68674b873f46a60a22f3ded88e6cc8f64a89f7997ba6e7f4eba5ee33a546ba0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:26:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a68674b873f46a60a22f3ded88e6cc8f64a89f7997ba6e7f4eba5ee33a546ba0"} {"level":"debug","ts":"2026-07-06T18:26:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a68674b873f46a60a22f3ded88e6cc8f64a89f7997ba6e7f4eba5ee33a546ba0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:26:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:26:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a68674b873f46a60a22f3ded88e6cc8f64a89f7997ba6e7f4eba5ee33a546ba0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:26:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a68674b873f46a60a22f3ded88e6cc8f64a89f7997ba6e7f4eba5ee33a546ba0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:26:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a68674b873f46a60a22f3ded88e6cc8f64a89f7997ba6e7f4eba5ee33a546ba0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:26:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a68674b873f46a60a22f3ded88e6cc8f64a89f7997ba6e7f4eba5ee33a546ba0"} {"level":"debug","ts":"2026-07-06T18:26:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:26:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:26:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:26:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:26:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:26:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6"} {"level":"debug","ts":"2026-07-06T18:26:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:26:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6"} {"level":"debug","ts":"2026-07-06T18:26:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:26:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:26:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:26:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:26:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:26:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:26:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:26:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:26:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:26:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6"} {"level":"debug","ts":"2026-07-06T18:26:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:26:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:26:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6"} {"level":"debug","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:26:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:26:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:26:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:26:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6"} {"level":"debug","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6"} {"level":"debug","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:26:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:26:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:26:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:26:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6"} {"level":"debug","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6"} {"level":"debug","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:26:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:26:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:26:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:26:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6"} {"level":"debug","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6"} {"level":"debug","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:26:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:26:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:26:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:26:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6"} {"level":"debug","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6"} {"level":"debug","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:26:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:26:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:26:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:26:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6"} {"level":"debug","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6"} {"level":"debug","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:26:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:26:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:26:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6"} {"level":"info","ts":"2026-07-06T18:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/669006cddaa3a7b1dd9a11f02e54c9dfdef6d90e242ea102fc7935e6d400ee41"} {"level":"info","ts":"2026-07-06T18:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aee5265a8c303186931446a5b5e0715de330a20ad06d096263661e0502b852f7"} {"level":"info","ts":"2026-07-06T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0aefa1a75ea04074c91a4de259a9168c6071224fca46325907cd03e1e5e055f6"} {"level":"info","ts":"2026-07-06T18:26:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a68674b873f46a60a22f3ded88e6cc8f64a89f7997ba6e7f4eba5ee33a546ba0"} {"level":"debug","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d"} {"level":"debug","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d"} {"level":"debug","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:28:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:28:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba6bc598579bf7e2f718aa71dfff58ac1f941582bb157c4c722340d891b2b38b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d"} {"level":"info","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba6bc598579bf7e2f718aa71dfff58ac1f941582bb157c4c722340d891b2b38b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:28:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:28:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba6bc598579bf7e2f718aa71dfff58ac1f941582bb157c4c722340d891b2b38b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba6bc598579bf7e2f718aa71dfff58ac1f941582bb157c4c722340d891b2b38b"} {"level":"info","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba6bc598579bf7e2f718aa71dfff58ac1f941582bb157c4c722340d891b2b38b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d"} {"level":"info","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba6bc598579bf7e2f718aa71dfff58ac1f941582bb157c4c722340d891b2b38b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:28:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:28:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:28:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:28:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba6bc598579bf7e2f718aa71dfff58ac1f941582bb157c4c722340d891b2b38b"} {"level":"error","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba6bc598579bf7e2f718aa71dfff58ac1f941582bb157c4c722340d891b2b38b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:28:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:28:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba6bc598579bf7e2f718aa71dfff58ac1f941582bb157c4c722340d891b2b38b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba6bc598579bf7e2f718aa71dfff58ac1f941582bb157c4c722340d891b2b38b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d"} {"level":"info","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8613efde139592fdc55d804655945ea67814be6ff50223c6f74bf9edcfa55809","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8613efde139592fdc55d804655945ea67814be6ff50223c6f74bf9edcfa55809"} {"level":"info","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8613efde139592fdc55d804655945ea67814be6ff50223c6f74bf9edcfa55809","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba6bc598579bf7e2f718aa71dfff58ac1f941582bb157c4c722340d891b2b38b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba6bc598579bf7e2f718aa71dfff58ac1f941582bb157c4c722340d891b2b38b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:28:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:28:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba6bc598579bf7e2f718aa71dfff58ac1f941582bb157c4c722340d891b2b38b"} {"level":"info","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8613efde139592fdc55d804655945ea67814be6ff50223c6f74bf9edcfa55809","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:28:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:28:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8613efde139592fdc55d804655945ea67814be6ff50223c6f74bf9edcfa55809"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d"} {"level":"info","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8613efde139592fdc55d804655945ea67814be6ff50223c6f74bf9edcfa55809","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba6bc598579bf7e2f718aa71dfff58ac1f941582bb157c4c722340d891b2b38b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:28:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:28:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba6bc598579bf7e2f718aa71dfff58ac1f941582bb157c4c722340d891b2b38b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba6bc598579bf7e2f718aa71dfff58ac1f941582bb157c4c722340d891b2b38b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8613efde139592fdc55d804655945ea67814be6ff50223c6f74bf9edcfa55809","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8613efde139592fdc55d804655945ea67814be6ff50223c6f74bf9edcfa55809"} {"level":"info","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8613efde139592fdc55d804655945ea67814be6ff50223c6f74bf9edcfa55809","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba6bc598579bf7e2f718aa71dfff58ac1f941582bb157c4c722340d891b2b38b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba6bc598579bf7e2f718aa71dfff58ac1f941582bb157c4c722340d891b2b38b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"802f0b057d39fbd16870ef7b71008b985e9631db99725a3aa2283d47c9e8c13f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba6bc598579bf7e2f718aa71dfff58ac1f941582bb157c4c722340d891b2b38b"} {"level":"info","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"802f0b057d39fbd16870ef7b71008b985e9631db99725a3aa2283d47c9e8c13f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8613efde139592fdc55d804655945ea67814be6ff50223c6f74bf9edcfa55809","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:28:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:28:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8613efde139592fdc55d804655945ea67814be6ff50223c6f74bf9edcfa55809"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d"} {"level":"info","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8613efde139592fdc55d804655945ea67814be6ff50223c6f74bf9edcfa55809","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba6bc598579bf7e2f718aa71dfff58ac1f941582bb157c4c722340d891b2b38b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:28:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:28:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba6bc598579bf7e2f718aa71dfff58ac1f941582bb157c4c722340d891b2b38b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba6bc598579bf7e2f718aa71dfff58ac1f941582bb157c4c722340d891b2b38b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"802f0b057d39fbd16870ef7b71008b985e9631db99725a3aa2283d47c9e8c13f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8613efde139592fdc55d804655945ea67814be6ff50223c6f74bf9edcfa55809","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8613efde139592fdc55d804655945ea67814be6ff50223c6f74bf9edcfa55809"} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8613efde139592fdc55d804655945ea67814be6ff50223c6f74bf9edcfa55809","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba6bc598579bf7e2f718aa71dfff58ac1f941582bb157c4c722340d891b2b38b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"802f0b057d39fbd16870ef7b71008b985e9631db99725a3aa2283d47c9e8c13f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"802f0b057d39fbd16870ef7b71008b985e9631db99725a3aa2283d47c9e8c13f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8613efde139592fdc55d804655945ea67814be6ff50223c6f74bf9edcfa55809","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8613efde139592fdc55d804655945ea67814be6ff50223c6f74bf9edcfa55809"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/802f0b057d39fbd16870ef7b71008b985e9631db99725a3aa2283d47c9e8c13f"} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8613efde139592fdc55d804655945ea67814be6ff50223c6f74bf9edcfa55809","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"802f0b057d39fbd16870ef7b71008b985e9631db99725a3aa2283d47c9e8c13f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["802f0b057d39fbd16870ef7b71008b985e9631db99725a3aa2283d47c9e8c13f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba6bc598579bf7e2f718aa71dfff58ac1f941582bb157c4c722340d891b2b38b"} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"802f0b057d39fbd16870ef7b71008b985e9631db99725a3aa2283d47c9e8c13f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6cde64b971d51b02ef3435c95a21336462418018b68c5ebb873cf05531bca5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6cde64b971d51b02ef3435c95a21336462418018b68c5ebb873cf05531bca5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8613efde139592fdc55d804655945ea67814be6ff50223c6f74bf9edcfa55809","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8613efde139592fdc55d804655945ea67814be6ff50223c6f74bf9edcfa55809"} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8613efde139592fdc55d804655945ea67814be6ff50223c6f74bf9edcfa55809","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"802f0b057d39fbd16870ef7b71008b985e9631db99725a3aa2283d47c9e8c13f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"802f0b057d39fbd16870ef7b71008b985e9631db99725a3aa2283d47c9e8c13f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6cde64b971d51b02ef3435c95a21336462418018b68c5ebb873cf05531bca5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8613efde139592fdc55d804655945ea67814be6ff50223c6f74bf9edcfa55809","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8613efde139592fdc55d804655945ea67814be6ff50223c6f74bf9edcfa55809"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/802f0b057d39fbd16870ef7b71008b985e9631db99725a3aa2283d47c9e8c13f"} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8613efde139592fdc55d804655945ea67814be6ff50223c6f74bf9edcfa55809","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"802f0b057d39fbd16870ef7b71008b985e9631db99725a3aa2283d47c9e8c13f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["802f0b057d39fbd16870ef7b71008b985e9631db99725a3aa2283d47c9e8c13f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6cde64b971d51b02ef3435c95a21336462418018b68c5ebb873cf05531bca5c"} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"802f0b057d39fbd16870ef7b71008b985e9631db99725a3aa2283d47c9e8c13f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6cde64b971d51b02ef3435c95a21336462418018b68c5ebb873cf05531bca5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6cde64b971d51b02ef3435c95a21336462418018b68c5ebb873cf05531bca5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6cde64b971d51b02ef3435c95a21336462418018b68c5ebb873cf05531bca5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8613efde139592fdc55d804655945ea67814be6ff50223c6f74bf9edcfa55809","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8613efde139592fdc55d804655945ea67814be6ff50223c6f74bf9edcfa55809"} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8613efde139592fdc55d804655945ea67814be6ff50223c6f74bf9edcfa55809","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"802f0b057d39fbd16870ef7b71008b985e9631db99725a3aa2283d47c9e8c13f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/802f0b057d39fbd16870ef7b71008b985e9631db99725a3aa2283d47c9e8c13f"} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"802f0b057d39fbd16870ef7b71008b985e9631db99725a3aa2283d47c9e8c13f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6cde64b971d51b02ef3435c95a21336462418018b68c5ebb873cf05531bca5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6cde64b971d51b02ef3435c95a21336462418018b68c5ebb873cf05531bca5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8613efde139592fdc55d804655945ea67814be6ff50223c6f74bf9edcfa55809","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8613efde139592fdc55d804655945ea67814be6ff50223c6f74bf9edcfa55809"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6cde64b971d51b02ef3435c95a21336462418018b68c5ebb873cf05531bca5c"} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8613efde139592fdc55d804655945ea67814be6ff50223c6f74bf9edcfa55809","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"802f0b057d39fbd16870ef7b71008b985e9631db99725a3aa2283d47c9e8c13f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["802f0b057d39fbd16870ef7b71008b985e9631db99725a3aa2283d47c9e8c13f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"802f0b057d39fbd16870ef7b71008b985e9631db99725a3aa2283d47c9e8c13f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6cde64b971d51b02ef3435c95a21336462418018b68c5ebb873cf05531bca5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6cde64b971d51b02ef3435c95a21336462418018b68c5ebb873cf05531bca5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8613efde139592fdc55d804655945ea67814be6ff50223c6f74bf9edcfa55809"} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6cde64b971d51b02ef3435c95a21336462418018b68c5ebb873cf05531bca5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8613efde139592fdc55d804655945ea67814be6ff50223c6f74bf9edcfa55809","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"802f0b057d39fbd16870ef7b71008b985e9631db99725a3aa2283d47c9e8c13f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/802f0b057d39fbd16870ef7b71008b985e9631db99725a3aa2283d47c9e8c13f"} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"802f0b057d39fbd16870ef7b71008b985e9631db99725a3aa2283d47c9e8c13f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6cde64b971d51b02ef3435c95a21336462418018b68c5ebb873cf05531bca5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6cde64b971d51b02ef3435c95a21336462418018b68c5ebb873cf05531bca5c"} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6cde64b971d51b02ef3435c95a21336462418018b68c5ebb873cf05531bca5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"802f0b057d39fbd16870ef7b71008b985e9631db99725a3aa2283d47c9e8c13f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["802f0b057d39fbd16870ef7b71008b985e9631db99725a3aa2283d47c9e8c13f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"802f0b057d39fbd16870ef7b71008b985e9631db99725a3aa2283d47c9e8c13f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45f6a32e6a4a986d98ac32a8b6460129d0be349203a2702106f24c5d94e4e915","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8613efde139592fdc55d804655945ea67814be6ff50223c6f74bf9edcfa55809"} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45f6a32e6a4a986d98ac32a8b6460129d0be349203a2702106f24c5d94e4e915","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6cde64b971d51b02ef3435c95a21336462418018b68c5ebb873cf05531bca5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6cde64b971d51b02ef3435c95a21336462418018b68c5ebb873cf05531bca5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/802f0b057d39fbd16870ef7b71008b985e9631db99725a3aa2283d47c9e8c13f"} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6cde64b971d51b02ef3435c95a21336462418018b68c5ebb873cf05531bca5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"802f0b057d39fbd16870ef7b71008b985e9631db99725a3aa2283d47c9e8c13f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45f6a32e6a4a986d98ac32a8b6460129d0be349203a2702106f24c5d94e4e915","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45f6a32e6a4a986d98ac32a8b6460129d0be349203a2702106f24c5d94e4e915"} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45f6a32e6a4a986d98ac32a8b6460129d0be349203a2702106f24c5d94e4e915","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6cde64b971d51b02ef3435c95a21336462418018b68c5ebb873cf05531bca5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6cde64b971d51b02ef3435c95a21336462418018b68c5ebb873cf05531bca5c"} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6cde64b971d51b02ef3435c95a21336462418018b68c5ebb873cf05531bca5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45f6a32e6a4a986d98ac32a8b6460129d0be349203a2702106f24c5d94e4e915","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3048f5bfa1beb1a5b41a78ce0b1966c7e4df8694010e4fb9e12014577033ad9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45f6a32e6a4a986d98ac32a8b6460129d0be349203a2702106f24c5d94e4e915"} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3048f5bfa1beb1a5b41a78ce0b1966c7e4df8694010e4fb9e12014577033ad9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6cde64b971d51b02ef3435c95a21336462418018b68c5ebb873cf05531bca5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6cde64b971d51b02ef3435c95a21336462418018b68c5ebb873cf05531bca5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3048f5bfa1beb1a5b41a78ce0b1966c7e4df8694010e4fb9e12014577033ad9"} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6cde64b971d51b02ef3435c95a21336462418018b68c5ebb873cf05531bca5c"} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3048f5bfa1beb1a5b41a78ce0b1966c7e4df8694010e4fb9e12014577033ad9"} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6cde64b971d51b02ef3435c95a21336462418018b68c5ebb873cf05531bca5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45f6a32e6a4a986d98ac32a8b6460129d0be349203a2702106f24c5d94e4e915","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45f6a32e6a4a986d98ac32a8b6460129d0be349203a2702106f24c5d94e4e915"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6cde64b971d51b02ef3435c95a21336462418018b68c5ebb873cf05531bca5c"} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45f6a32e6a4a986d98ac32a8b6460129d0be349203a2702106f24c5d94e4e915","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3048f5bfa1beb1a5b41a78ce0b1966c7e4df8694010e4fb9e12014577033ad9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d3048f5bfa1beb1a5b41a78ce0b1966c7e4df8694010e4fb9e12014577033ad9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45f6a32e6a4a986d98ac32a8b6460129d0be349203a2702106f24c5d94e4e915"} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3048f5bfa1beb1a5b41a78ce0b1966c7e4df8694010e4fb9e12014577033ad9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6cde64b971d51b02ef3435c95a21336462418018b68c5ebb873cf05531bca5c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45f6a32e6a4a986d98ac32a8b6460129d0be349203a2702106f24c5d94e4e915","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2b111e53fdc740ef93a40d4ec82edcd5dfb8d20d537bb0efee0a3c42083e5c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2b111e53fdc740ef93a40d4ec82edcd5dfb8d20d537bb0efee0a3c42083e5c7"} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb539fccfa77279580de490c14160e472a149cc12231a1af5e51639957d72d05"} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1c222aa6a3639d0cb0c0ef1fc06cf960c0eddbbfb5f632eaf65d3ed6df21229"} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2b111e53fdc740ef93a40d4ec82edcd5dfb8d20d537bb0efee0a3c42083e5c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fb539fccfa77279580de490c14160e472a149cc12231a1af5e51639957d72d05","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fb539fccfa77279580de490c14160e472a149cc12231a1af5e51639957d72d05"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3048f5bfa1beb1a5b41a78ce0b1966c7e4df8694010e4fb9e12014577033ad9"} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2b111e53fdc740ef93a40d4ec82edcd5dfb8d20d537bb0efee0a3c42083e5c7"} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fb539fccfa77279580de490c14160e472a149cc12231a1af5e51639957d72d05","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a1c222aa6a3639d0cb0c0ef1fc06cf960c0eddbbfb5f632eaf65d3ed6df21229","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a1c222aa6a3639d0cb0c0ef1fc06cf960c0eddbbfb5f632eaf65d3ed6df21229"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb539fccfa77279580de490c14160e472a149cc12231a1af5e51639957d72d05"} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a1c222aa6a3639d0cb0c0ef1fc06cf960c0eddbbfb5f632eaf65d3ed6df21229","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3048f5bfa1beb1a5b41a78ce0b1966c7e4df8694010e4fb9e12014577033ad9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2b111e53fdc740ef93a40d4ec82edcd5dfb8d20d537bb0efee0a3c42083e5c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:28:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2b111e53fdc740ef93a40d4ec82edcd5dfb8d20d537bb0efee0a3c42083e5c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a1c222aa6a3639d0cb0c0ef1fc06cf960c0eddbbfb5f632eaf65d3ed6df21229"} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2b111e53fdc740ef93a40d4ec82edcd5dfb8d20d537bb0efee0a3c42083e5c7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb539fccfa77279580de490c14160e472a149cc12231a1af5e51639957d72d05","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a1c222aa6a3639d0cb0c0ef1fc06cf960c0eddbbfb5f632eaf65d3ed6df21229","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2b111e53fdc740ef93a40d4ec82edcd5dfb8d20d537bb0efee0a3c42083e5c7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:28:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2b111e53fdc740ef93a40d4ec82edcd5dfb8d20d537bb0efee0a3c42083e5c7"} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be5e89d09511c4c85da0586cd4e9341da5181ee931d0596f6fbadb78eeead706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be5e89d09511c4c85da0586cd4e9341da5181ee931d0596f6fbadb78eeead706","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be5e89d09511c4c85da0586cd4e9341da5181ee931d0596f6fbadb78eeead706","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be5e89d09511c4c85da0586cd4e9341da5181ee931d0596f6fbadb78eeead706","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be5e89d09511c4c85da0586cd4e9341da5181ee931d0596f6fbadb78eeead706"} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be5e89d09511c4c85da0586cd4e9341da5181ee931d0596f6fbadb78eeead706","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be5e89d09511c4c85da0586cd4e9341da5181ee931d0596f6fbadb78eeead706"} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be5e89d09511c4c85da0586cd4e9341da5181ee931d0596f6fbadb78eeead706","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be5e89d09511c4c85da0586cd4e9341da5181ee931d0596f6fbadb78eeead706"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be5e89d09511c4c85da0586cd4e9341da5181ee931d0596f6fbadb78eeead706","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be5e89d09511c4c85da0586cd4e9341da5181ee931d0596f6fbadb78eeead706","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0166686bf4362045ed04a3aab2b50e6c4fa64f22ab130da1941e2525dcea833c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0166686bf4362045ed04a3aab2b50e6c4fa64f22ab130da1941e2525dcea833c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0166686bf4362045ed04a3aab2b50e6c4fa64f22ab130da1941e2525dcea833c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0166686bf4362045ed04a3aab2b50e6c4fa64f22ab130da1941e2525dcea833c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be5e89d09511c4c85da0586cd4e9341da5181ee931d0596f6fbadb78eeead706"} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0166686bf4362045ed04a3aab2b50e6c4fa64f22ab130da1941e2525dcea833c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0166686bf4362045ed04a3aab2b50e6c4fa64f22ab130da1941e2525dcea833c"} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0166686bf4362045ed04a3aab2b50e6c4fa64f22ab130da1941e2525dcea833c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0166686bf4362045ed04a3aab2b50e6c4fa64f22ab130da1941e2525dcea833c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0166686bf4362045ed04a3aab2b50e6c4fa64f22ab130da1941e2525dcea833c"} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0166686bf4362045ed04a3aab2b50e6c4fa64f22ab130da1941e2525dcea833c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0166686bf4362045ed04a3aab2b50e6c4fa64f22ab130da1941e2525dcea833c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0166686bf4362045ed04a3aab2b50e6c4fa64f22ab130da1941e2525dcea833c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f2fe5903f28d344b665f0f1f24922370ac5efcee60809ca773f872092a6bce8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f2fe5903f28d344b665f0f1f24922370ac5efcee60809ca773f872092a6bce8"} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f2fe5903f28d344b665f0f1f24922370ac5efcee60809ca773f872092a6bce8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0166686bf4362045ed04a3aab2b50e6c4fa64f22ab130da1941e2525dcea833c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0166686bf4362045ed04a3aab2b50e6c4fa64f22ab130da1941e2525dcea833c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f2fe5903f28d344b665f0f1f24922370ac5efcee60809ca773f872092a6bce8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f2fe5903f28d344b665f0f1f24922370ac5efcee60809ca773f872092a6bce8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0166686bf4362045ed04a3aab2b50e6c4fa64f22ab130da1941e2525dcea833c"} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f2fe5903f28d344b665f0f1f24922370ac5efcee60809ca773f872092a6bce8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0166686bf4362045ed04a3aab2b50e6c4fa64f22ab130da1941e2525dcea833c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0166686bf4362045ed04a3aab2b50e6c4fa64f22ab130da1941e2525dcea833c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f2fe5903f28d344b665f0f1f24922370ac5efcee60809ca773f872092a6bce8"} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0166686bf4362045ed04a3aab2b50e6c4fa64f22ab130da1941e2525dcea833c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f2fe5903f28d344b665f0f1f24922370ac5efcee60809ca773f872092a6bce8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0166686bf4362045ed04a3aab2b50e6c4fa64f22ab130da1941e2525dcea833c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0166686bf4362045ed04a3aab2b50e6c4fa64f22ab130da1941e2525dcea833c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0166686bf4362045ed04a3aab2b50e6c4fa64f22ab130da1941e2525dcea833c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0166686bf4362045ed04a3aab2b50e6c4fa64f22ab130da1941e2525dcea833c"} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0166686bf4362045ed04a3aab2b50e6c4fa64f22ab130da1941e2525dcea833c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0166686bf4362045ed04a3aab2b50e6c4fa64f22ab130da1941e2525dcea833c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0166686bf4362045ed04a3aab2b50e6c4fa64f22ab130da1941e2525dcea833c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0166686bf4362045ed04a3aab2b50e6c4fa64f22ab130da1941e2525dcea833c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f2fe5903f28d344b665f0f1f24922370ac5efcee60809ca773f872092a6bce8"} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0166686bf4362045ed04a3aab2b50e6c4fa64f22ab130da1941e2525dcea833c"} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89b2852234f00ea57af08ee108db012dd268eaf640b70c3ddff7aa21d990e7e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89b2852234f00ea57af08ee108db012dd268eaf640b70c3ddff7aa21d990e7e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89b2852234f00ea57af08ee108db012dd268eaf640b70c3ddff7aa21d990e7e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89b2852234f00ea57af08ee108db012dd268eaf640b70c3ddff7aa21d990e7e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89b2852234f00ea57af08ee108db012dd268eaf640b70c3ddff7aa21d990e7e5"} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89b2852234f00ea57af08ee108db012dd268eaf640b70c3ddff7aa21d990e7e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89b2852234f00ea57af08ee108db012dd268eaf640b70c3ddff7aa21d990e7e5"} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89b2852234f00ea57af08ee108db012dd268eaf640b70c3ddff7aa21d990e7e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89b2852234f00ea57af08ee108db012dd268eaf640b70c3ddff7aa21d990e7e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89b2852234f00ea57af08ee108db012dd268eaf640b70c3ddff7aa21d990e7e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89b2852234f00ea57af08ee108db012dd268eaf640b70c3ddff7aa21d990e7e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89b2852234f00ea57af08ee108db012dd268eaf640b70c3ddff7aa21d990e7e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a062ec54f12a24f2d5df8c603cf08115e71bbe17d421fe9a4a37a773932d38f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89b2852234f00ea57af08ee108db012dd268eaf640b70c3ddff7aa21d990e7e5"} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a062ec54f12a24f2d5df8c603cf08115e71bbe17d421fe9a4a37a773932d38f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89b2852234f00ea57af08ee108db012dd268eaf640b70c3ddff7aa21d990e7e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89b2852234f00ea57af08ee108db012dd268eaf640b70c3ddff7aa21d990e7e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89b2852234f00ea57af08ee108db012dd268eaf640b70c3ddff7aa21d990e7e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1baa436f744abcba13a644d5f3234b9d9eda384171bc6dd6a24a0ccab422426","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a062ec54f12a24f2d5df8c603cf08115e71bbe17d421fe9a4a37a773932d38f"} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1baa436f744abcba13a644d5f3234b9d9eda384171bc6dd6a24a0ccab422426","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a062ec54f12a24f2d5df8c603cf08115e71bbe17d421fe9a4a37a773932d38f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a062ec54f12a24f2d5df8c603cf08115e71bbe17d421fe9a4a37a773932d38f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1baa436f744abcba13a644d5f3234b9d9eda384171bc6dd6a24a0ccab422426"} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a062ec54f12a24f2d5df8c603cf08115e71bbe17d421fe9a4a37a773932d38f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89b2852234f00ea57af08ee108db012dd268eaf640b70c3ddff7aa21d990e7e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89b2852234f00ea57af08ee108db012dd268eaf640b70c3ddff7aa21d990e7e5"} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89b2852234f00ea57af08ee108db012dd268eaf640b70c3ddff7aa21d990e7e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1baa436f744abcba13a644d5f3234b9d9eda384171bc6dd6a24a0ccab422426","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1baa436f744abcba13a644d5f3234b9d9eda384171bc6dd6a24a0ccab422426"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1baa436f744abcba13a644d5f3234b9d9eda384171bc6dd6a24a0ccab422426","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a062ec54f12a24f2d5df8c603cf08115e71bbe17d421fe9a4a37a773932d38f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a062ec54f12a24f2d5df8c603cf08115e71bbe17d421fe9a4a37a773932d38f"} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a062ec54f12a24f2d5df8c603cf08115e71bbe17d421fe9a4a37a773932d38f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89b2852234f00ea57af08ee108db012dd268eaf640b70c3ddff7aa21d990e7e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89b2852234f00ea57af08ee108db012dd268eaf640b70c3ddff7aa21d990e7e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89b2852234f00ea57af08ee108db012dd268eaf640b70c3ddff7aa21d990e7e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1baa436f744abcba13a644d5f3234b9d9eda384171bc6dd6a24a0ccab422426","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1baa436f744abcba13a644d5f3234b9d9eda384171bc6dd6a24a0ccab422426"} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1baa436f744abcba13a644d5f3234b9d9eda384171bc6dd6a24a0ccab422426","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"304e727345b108efb98bba73db2985fc012955acaf08de5b62f8013eb99e46b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"304e727345b108efb98bba73db2985fc012955acaf08de5b62f8013eb99e46b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a062ec54f12a24f2d5df8c603cf08115e71bbe17d421fe9a4a37a773932d38f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a062ec54f12a24f2d5df8c603cf08115e71bbe17d421fe9a4a37a773932d38f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89b2852234f00ea57af08ee108db012dd268eaf640b70c3ddff7aa21d990e7e5"} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a062ec54f12a24f2d5df8c603cf08115e71bbe17d421fe9a4a37a773932d38f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89b2852234f00ea57af08ee108db012dd268eaf640b70c3ddff7aa21d990e7e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1baa436f744abcba13a644d5f3234b9d9eda384171bc6dd6a24a0ccab422426","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1baa436f744abcba13a644d5f3234b9d9eda384171bc6dd6a24a0ccab422426"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1baa436f744abcba13a644d5f3234b9d9eda384171bc6dd6a24a0ccab422426","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"304e727345b108efb98bba73db2985fc012955acaf08de5b62f8013eb99e46b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"304e727345b108efb98bba73db2985fc012955acaf08de5b62f8013eb99e46b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a062ec54f12a24f2d5df8c603cf08115e71bbe17d421fe9a4a37a773932d38f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1baa436f744abcba13a644d5f3234b9d9eda384171bc6dd6a24a0ccab422426","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc6fff2154a6453a9213ba4f9332d89b55789fb28e39fd7f5a24345dc0eca6fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/304e727345b108efb98bba73db2985fc012955acaf08de5b62f8013eb99e46b1"} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc6fff2154a6453a9213ba4f9332d89b55789fb28e39fd7f5a24345dc0eca6fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"304e727345b108efb98bba73db2985fc012955acaf08de5b62f8013eb99e46b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["304e727345b108efb98bba73db2985fc012955acaf08de5b62f8013eb99e46b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"304e727345b108efb98bba73db2985fc012955acaf08de5b62f8013eb99e46b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d2b3abc482b7172f49d62c2da7a78266b9936e72f2f659b5eb9ab955018d1c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a062ec54f12a24f2d5df8c603cf08115e71bbe17d421fe9a4a37a773932d38f"} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d2b3abc482b7172f49d62c2da7a78266b9936e72f2f659b5eb9ab955018d1c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc6fff2154a6453a9213ba4f9332d89b55789fb28e39fd7f5a24345dc0eca6fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"304e727345b108efb98bba73db2985fc012955acaf08de5b62f8013eb99e46b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d2b3abc482b7172f49d62c2da7a78266b9936e72f2f659b5eb9ab955018d1c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d2b3abc482b7172f49d62c2da7a78266b9936e72f2f659b5eb9ab955018d1c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc6fff2154a6453a9213ba4f9332d89b55789fb28e39fd7f5a24345dc0eca6fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1baa436f744abcba13a644d5f3234b9d9eda384171bc6dd6a24a0ccab422426"} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d2b3abc482b7172f49d62c2da7a78266b9936e72f2f659b5eb9ab955018d1c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc6fff2154a6453a9213ba4f9332d89b55789fb28e39fd7f5a24345dc0eca6fc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89b2852234f00ea57af08ee108db012dd268eaf640b70c3ddff7aa21d990e7e5"} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc6fff2154a6453a9213ba4f9332d89b55789fb28e39fd7f5a24345dc0eca6fc"} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d2b3abc482b7172f49d62c2da7a78266b9936e72f2f659b5eb9ab955018d1c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d2b3abc482b7172f49d62c2da7a78266b9936e72f2f659b5eb9ab955018d1c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc6fff2154a6453a9213ba4f9332d89b55789fb28e39fd7f5a24345dc0eca6fc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc6fff2154a6453a9213ba4f9332d89b55789fb28e39fd7f5a24345dc0eca6fc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d2b3abc482b7172f49d62c2da7a78266b9936e72f2f659b5eb9ab955018d1c9"} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc6fff2154a6453a9213ba4f9332d89b55789fb28e39fd7f5a24345dc0eca6fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d2b3abc482b7172f49d62c2da7a78266b9936e72f2f659b5eb9ab955018d1c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d2b3abc482b7172f49d62c2da7a78266b9936e72f2f659b5eb9ab955018d1c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/304e727345b108efb98bba73db2985fc012955acaf08de5b62f8013eb99e46b1"} {"level":"info","ts":"2026-07-06T18:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d2b3abc482b7172f49d62c2da7a78266b9936e72f2f659b5eb9ab955018d1c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:28:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc6fff2154a6453a9213ba4f9332d89b55789fb28e39fd7f5a24345dc0eca6fc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d2b3abc482b7172f49d62c2da7a78266b9936e72f2f659b5eb9ab955018d1c9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee"} {"level":"debug","ts":"2026-07-06T18:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:28:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:28:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d2b3abc482b7172f49d62c2da7a78266b9936e72f2f659b5eb9ab955018d1c9"} {"level":"info","ts":"2026-07-06T18:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d2b3abc482b7172f49d62c2da7a78266b9936e72f2f659b5eb9ab955018d1c9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc6fff2154a6453a9213ba4f9332d89b55789fb28e39fd7f5a24345dc0eca6fc"} {"level":"info","ts":"2026-07-06T18:28:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee"} {"level":"info","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bccb1c3d-607a-4d28-8949-2fa9b447dcef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53082","PortSpecifier":{"PortValue":53082}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bccb1c3d-607a-4d28-8949-2fa9b447dcef","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bccb1c3d-607a-4d28-8949-2fa9b447dcef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53082","PortSpecifier":{"PortValue":53082}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362501,"nanos":140650543},"http":{"id":"bccb1c3d-607a-4d28-8949-2fa9b447dcef","method":"POST","headers":{":authority":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bccb1c3d-607a-4d28-8949-2fa9b447dcef","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bccb1c3d-607a-4d28-8949-2fa9b447dcef","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"]}} {"level":"debug","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bccb1c3d-607a-4d28-8949-2fa9b447dcef","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bccb1c3d-607a-4d28-8949-2fa9b447dcef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bccb1c3d-607a-4d28-8949-2fa9b447dcef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bccb1c3d-607a-4d28-8949-2fa9b447dcef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9c9be0/auth-test-model-9c9be0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bccb1c3d-607a-4d28-8949-2fa9b447dcef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bccb1c3d-607a-4d28-8949-2fa9b447dcef","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bccb1c3d-607a-4d28-8949-2fa9b447dcef","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bccb1c3d-607a-4d28-8949-2fa9b447dcef","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bccb1c3d-607a-4d28-8949-2fa9b447dcef","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae4da7bb-a13d-4d12-b52c-ed6116d23e67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41094","PortSpecifier":{"PortValue":41094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ae4da7bb-a13d-4d12-b52c-ed6116d23e67","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae4da7bb-a13d-4d12-b52c-ed6116d23e67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41094","PortSpecifier":{"PortValue":41094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362501,"nanos":201664094},"http":{"id":"ae4da7bb-a13d-4d12-b52c-ed6116d23e67","method":"POST","headers":{":authority":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ae4da7bb-a13d-4d12-b52c-ed6116d23e67","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ae4da7bb-a13d-4d12-b52c-ed6116d23e67","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"]}} {"level":"debug","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ae4da7bb-a13d-4d12-b52c-ed6116d23e67","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae4da7bb-a13d-4d12-b52c-ed6116d23e67","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae4da7bb-a13d-4d12-b52c-ed6116d23e67","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae4da7bb-a13d-4d12-b52c-ed6116d23e67","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b6a5ee/auth-test-model-b6a5ee\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ae4da7bb-a13d-4d12-b52c-ed6116d23e67","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae4da7bb-a13d-4d12-b52c-ed6116d23e67","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae4da7bb-a13d-4d12-b52c-ed6116d23e67","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae4da7bb-a13d-4d12-b52c-ed6116d23e67","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae4da7bb-a13d-4d12-b52c-ed6116d23e67","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2e4cf8f-ff1b-4a7d-85f9-700c71edc669","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53092","PortSpecifier":{"PortValue":53092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d2e4cf8f-ff1b-4a7d-85f9-700c71edc669","method":"GET","path":"/maas-api/v1/api-keys/3561f233-d6c0-4f26-948f-773a7e59ff83","host":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d2e4cf8f-ff1b-4a7d-85f9-700c71edc669","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53092","PortSpecifier":{"PortValue":53092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362501,"nanos":288012280},"http":{"id":"d2e4cf8f-ff1b-4a7d-85f9-700c71edc669","method":"GET","headers":{":authority":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3561f233-d6c0-4f26-948f-773a7e59ff83",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d2e4cf8f-ff1b-4a7d-85f9-700c71edc669","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d2e4cf8f-ff1b-4a7d-85f9-700c71edc669","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"]}} {"level":"debug","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d2e4cf8f-ff1b-4a7d-85f9-700c71edc669","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3561f233-d6c0-4f26-948f-773a7e59ff83",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2e4cf8f-ff1b-4a7d-85f9-700c71edc669","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2e4cf8f-ff1b-4a7d-85f9-700c71edc669","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d2e4cf8f-ff1b-4a7d-85f9-700c71edc669","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9c9be0/auth-test-model-9c9be0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d2e4cf8f-ff1b-4a7d-85f9-700c71edc669","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2e4cf8f-ff1b-4a7d-85f9-700c71edc669","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d2e4cf8f-ff1b-4a7d-85f9-700c71edc669","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2e4cf8f-ff1b-4a7d-85f9-700c71edc669","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d2e4cf8f-ff1b-4a7d-85f9-700c71edc669","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bcc6f4be-3df1-475e-add9-dbd8d5bd7b82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41104","PortSpecifier":{"PortValue":41104}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bcc6f4be-3df1-475e-add9-dbd8d5bd7b82","method":"GET","path":"/maas-api/v1/api-keys/528b4120-8ee0-48f7-8ea5-7618f824566c","host":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bcc6f4be-3df1-475e-add9-dbd8d5bd7b82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:41104","PortSpecifier":{"PortValue":41104}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362501,"nanos":334513842},"http":{"id":"bcc6f4be-3df1-475e-add9-dbd8d5bd7b82","method":"GET","headers":{":authority":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/528b4120-8ee0-48f7-8ea5-7618f824566c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bcc6f4be-3df1-475e-add9-dbd8d5bd7b82","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bcc6f4be-3df1-475e-add9-dbd8d5bd7b82","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"]}} {"level":"debug","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bcc6f4be-3df1-475e-add9-dbd8d5bd7b82","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/528b4120-8ee0-48f7-8ea5-7618f824566c",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bcc6f4be-3df1-475e-add9-dbd8d5bd7b82","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bcc6f4be-3df1-475e-add9-dbd8d5bd7b82","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bcc6f4be-3df1-475e-add9-dbd8d5bd7b82","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b6a5ee/auth-test-model-b6a5ee\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bcc6f4be-3df1-475e-add9-dbd8d5bd7b82","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bcc6f4be-3df1-475e-add9-dbd8d5bd7b82","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bcc6f4be-3df1-475e-add9-dbd8d5bd7b82","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bcc6f4be-3df1-475e-add9-dbd8d5bd7b82","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:28:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bcc6f4be-3df1-475e-add9-dbd8d5bd7b82","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:28:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"41260b08-1e7f-4888-ba27-3a5192e67760","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35036","PortSpecifier":{"PortValue":35036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"41260b08-1e7f-4888-ba27-3a5192e67760","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:28:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"41260b08-1e7f-4888-ba27-3a5192e67760","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35036","PortSpecifier":{"PortValue":35036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362518,"nanos":828235989},"http":{"id":"41260b08-1e7f-4888-ba27-3a5192e67760","method":"POST","headers":{":authority":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:28:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"41260b08-1e7f-4888-ba27-3a5192e67760","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:28:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"41260b08-1e7f-4888-ba27-3a5192e67760","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"]}} {"level":"debug","ts":"2026-07-06T18:28:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"41260b08-1e7f-4888-ba27-3a5192e67760","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:28:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41260b08-1e7f-4888-ba27-3a5192e67760","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:28:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41260b08-1e7f-4888-ba27-3a5192e67760","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:28:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41260b08-1e7f-4888-ba27-3a5192e67760","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9c9be0/auth-test-model-9c9be0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:28:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"41260b08-1e7f-4888-ba27-3a5192e67760","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:28:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41260b08-1e7f-4888-ba27-3a5192e67760","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:28:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41260b08-1e7f-4888-ba27-3a5192e67760","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:28:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"41260b08-1e7f-4888-ba27-3a5192e67760","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:28:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"41260b08-1e7f-4888-ba27-3a5192e67760","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:28:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60193569-bb2d-4af4-9432-2990193e8c12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:47526","PortSpecifier":{"PortValue":47526}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"60193569-bb2d-4af4-9432-2990193e8c12","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:28:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60193569-bb2d-4af4-9432-2990193e8c12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:47526","PortSpecifier":{"PortValue":47526}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362518,"nanos":880670895},"http":{"id":"60193569-bb2d-4af4-9432-2990193e8c12","method":"POST","headers":{":authority":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:28:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"60193569-bb2d-4af4-9432-2990193e8c12","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:28:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"60193569-bb2d-4af4-9432-2990193e8c12","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"]}} {"level":"debug","ts":"2026-07-06T18:28:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"60193569-bb2d-4af4-9432-2990193e8c12","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:28:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60193569-bb2d-4af4-9432-2990193e8c12","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:28:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60193569-bb2d-4af4-9432-2990193e8c12","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:28:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60193569-bb2d-4af4-9432-2990193e8c12","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b6a5ee/auth-test-model-b6a5ee\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:28:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"60193569-bb2d-4af4-9432-2990193e8c12","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:28:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60193569-bb2d-4af4-9432-2990193e8c12","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:28:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60193569-bb2d-4af4-9432-2990193e8c12","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:28:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60193569-bb2d-4af4-9432-2990193e8c12","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:28:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60193569-bb2d-4af4-9432-2990193e8c12","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:28:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"185c0f40-24c8-41cf-83dc-4aa448137070","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35050","PortSpecifier":{"PortValue":35050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"185c0f40-24c8-41cf-83dc-4aa448137070","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:28:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"185c0f40-24c8-41cf-83dc-4aa448137070","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:35050","PortSpecifier":{"PortValue":35050}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362518,"nanos":927140747},"http":{"id":"185c0f40-24c8-41cf-83dc-4aa448137070","method":"GET","headers":{":authority":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:28:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"185c0f40-24c8-41cf-83dc-4aa448137070","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZOYodXxkCSgW9C8s_FxOViq9IDjU2iRQiN04HHTCOs9Bd7rWCtNDZxAb8dBH"} {"level":"debug","ts":"2026-07-06T18:28:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"185c0f40-24c8-41cf-83dc-4aa448137070","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9c9be0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZOYodXxkCSgW9C8s_FxOViq9IDjU2iRQiN04HHTCOs9Bd7rWCtNDZxAb8dBH\"}"} {"level":"debug","ts":"2026-07-06T18:28:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"185c0f40-24c8-41cf-83dc-4aa448137070","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9c9be0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"93e667a6-8f24-4bca-9ed1-11b6b7be1b32","keyName":"e2e-auth-iso-a-abe227","subscription":"e2e-auth-iso-b5839d","tenant":"e2e-shared-a-9c9be0","userId":"93e667a6-8f24-4bca-9ed1-11b6b7be1b32","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T18:28:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"185c0f40-24c8-41cf-83dc-4aa448137070","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:28:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"185c0f40-24c8-41cf-83dc-4aa448137070","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:28:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"185c0f40-24c8-41cf-83dc-4aa448137070","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:28:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"185c0f40-24c8-41cf-83dc-4aa448137070","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9c9be0/auth-test-model-9c9be0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:28:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"185c0f40-24c8-41cf-83dc-4aa448137070","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:28:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"185c0f40-24c8-41cf-83dc-4aa448137070","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-b5839d"} {"level":"debug","ts":"2026-07-06T18:28:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"185c0f40-24c8-41cf-83dc-4aa448137070","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-06T18:28:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"185c0f40-24c8-41cf-83dc-4aa448137070","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:28:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"185c0f40-24c8-41cf-83dc-4aa448137070","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:28:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"185c0f40-24c8-41cf-83dc-4aa448137070","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:28:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d18932b-37fa-4c9a-93eb-1aab63d25033","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:45288","PortSpecifier":{"PortValue":45288}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2d18932b-37fa-4c9a-93eb-1aab63d25033","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:28:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d18932b-37fa-4c9a-93eb-1aab63d25033","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:45288","PortSpecifier":{"PortValue":45288}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362534,"nanos":324896294},"http":{"id":"2d18932b-37fa-4c9a-93eb-1aab63d25033","method":"POST","headers":{":authority":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:28:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2d18932b-37fa-4c9a-93eb-1aab63d25033","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:28:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2d18932b-37fa-4c9a-93eb-1aab63d25033","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"]}} {"level":"debug","ts":"2026-07-06T18:28:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2d18932b-37fa-4c9a-93eb-1aab63d25033","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:28:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d18932b-37fa-4c9a-93eb-1aab63d25033","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:28:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d18932b-37fa-4c9a-93eb-1aab63d25033","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:28:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d18932b-37fa-4c9a-93eb-1aab63d25033","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9c9be0/auth-test-model-9c9be0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:28:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2d18932b-37fa-4c9a-93eb-1aab63d25033","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:28:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d18932b-37fa-4c9a-93eb-1aab63d25033","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:28:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d18932b-37fa-4c9a-93eb-1aab63d25033","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T18:28:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d18932b-37fa-4c9a-93eb-1aab63d25033","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:28:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d18932b-37fa-4c9a-93eb-1aab63d25033","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:28:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78c5e1ce-be38-4764-be7e-18815008fe85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38204","PortSpecifier":{"PortValue":38204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"78c5e1ce-be38-4764-be7e-18815008fe85","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:28:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78c5e1ce-be38-4764-be7e-18815008fe85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38204","PortSpecifier":{"PortValue":38204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362534,"nanos":364089011},"http":{"id":"78c5e1ce-be38-4764-be7e-18815008fe85","method":"POST","headers":{":authority":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:28:54Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"78c5e1ce-be38-4764-be7e-18815008fe85","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:28:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"78c5e1ce-be38-4764-be7e-18815008fe85","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"]}} {"level":"debug","ts":"2026-07-06T18:28:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"78c5e1ce-be38-4764-be7e-18815008fe85","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:28:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78c5e1ce-be38-4764-be7e-18815008fe85","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:28:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78c5e1ce-be38-4764-be7e-18815008fe85","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:28:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78c5e1ce-be38-4764-be7e-18815008fe85","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b6a5ee/auth-test-model-b6a5ee\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:28:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"78c5e1ce-be38-4764-be7e-18815008fe85","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:28:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78c5e1ce-be38-4764-be7e-18815008fe85","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:28:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78c5e1ce-be38-4764-be7e-18815008fe85","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:28:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78c5e1ce-be38-4764-be7e-18815008fe85","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:28:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78c5e1ce-be38-4764-be7e-18815008fe85","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:28:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dbfb57a9-fb9c-4c57-b1af-79a01f0bca80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38208","PortSpecifier":{"PortValue":38208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dbfb57a9-fb9c-4c57-b1af-79a01f0bca80","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:28:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dbfb57a9-fb9c-4c57-b1af-79a01f0bca80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:38208","PortSpecifier":{"PortValue":38208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362534,"nanos":406804403},"http":{"id":"dbfb57a9-fb9c-4c57-b1af-79a01f0bca80","method":"GET","headers":{":authority":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:28:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dbfb57a9-fb9c-4c57-b1af-79a01f0bca80","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-147lo3ujl1SXPv8fz_ZdZ6t2a9fIKO4pXMhMEBcw4plOZBaGL65CVC3CcHxcd"} {"level":"debug","ts":"2026-07-06T18:28:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dbfb57a9-fb9c-4c57-b1af-79a01f0bca80","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b6a5ee.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-147lo3ujl1SXPv8fz_ZdZ6t2a9fIKO4pXMhMEBcw4plOZBaGL65CVC3CcHxcd\"}"} {"level":"debug","ts":"2026-07-06T18:28:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dbfb57a9-fb9c-4c57-b1af-79a01f0bca80","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b6a5ee.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-06T18:28:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dbfb57a9-fb9c-4c57-b1af-79a01f0bca80","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:28:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"dbfb57a9-fb9c-4c57-b1af-79a01f0bca80","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-06T18:28:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dbfb57a9-fb9c-4c57-b1af-79a01f0bca80","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-06T18:28:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dbfb57a9-fb9c-4c57-b1af-79a01f0bca80","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"125a0040-00da-433b-91cc-3a6ad3a18f0c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49394","PortSpecifier":{"PortValue":49394}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"125a0040-00da-433b-91cc-3a6ad3a18f0c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"125a0040-00da-433b-91cc-3a6ad3a18f0c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49394","PortSpecifier":{"PortValue":49394}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362551,"nanos":755716229},"http":{"id":"125a0040-00da-433b-91cc-3a6ad3a18f0c","method":"POST","headers":{":authority":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"125a0040-00da-433b-91cc-3a6ad3a18f0c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"125a0040-00da-433b-91cc-3a6ad3a18f0c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"]}} {"level":"debug","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"125a0040-00da-433b-91cc-3a6ad3a18f0c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"125a0040-00da-433b-91cc-3a6ad3a18f0c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"125a0040-00da-433b-91cc-3a6ad3a18f0c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"125a0040-00da-433b-91cc-3a6ad3a18f0c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9c9be0/auth-test-model-9c9be0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"125a0040-00da-433b-91cc-3a6ad3a18f0c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"125a0040-00da-433b-91cc-3a6ad3a18f0c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"125a0040-00da-433b-91cc-3a6ad3a18f0c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"125a0040-00da-433b-91cc-3a6ad3a18f0c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"125a0040-00da-433b-91cc-3a6ad3a18f0c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7f4a595-9eb0-436e-bd04-25ed94f9e63c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53758","PortSpecifier":{"PortValue":53758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b7f4a595-9eb0-436e-bd04-25ed94f9e63c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7f4a595-9eb0-436e-bd04-25ed94f9e63c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53758","PortSpecifier":{"PortValue":53758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362551,"nanos":790223323},"http":{"id":"b7f4a595-9eb0-436e-bd04-25ed94f9e63c","method":"POST","headers":{":authority":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b7f4a595-9eb0-436e-bd04-25ed94f9e63c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b7f4a595-9eb0-436e-bd04-25ed94f9e63c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"]}} {"level":"debug","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b7f4a595-9eb0-436e-bd04-25ed94f9e63c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7f4a595-9eb0-436e-bd04-25ed94f9e63c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7f4a595-9eb0-436e-bd04-25ed94f9e63c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7f4a595-9eb0-436e-bd04-25ed94f9e63c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b6a5ee/auth-test-model-b6a5ee\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b7f4a595-9eb0-436e-bd04-25ed94f9e63c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7f4a595-9eb0-436e-bd04-25ed94f9e63c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7f4a595-9eb0-436e-bd04-25ed94f9e63c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7f4a595-9eb0-436e-bd04-25ed94f9e63c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7f4a595-9eb0-436e-bd04-25ed94f9e63c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ec9d4d8-25d8-483a-9c39-04f6c503df80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49398","PortSpecifier":{"PortValue":49398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6ec9d4d8-25d8-483a-9c39-04f6c503df80","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ec9d4d8-25d8-483a-9c39-04f6c503df80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49398","PortSpecifier":{"PortValue":49398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362551,"nanos":826733924},"http":{"id":"6ec9d4d8-25d8-483a-9c39-04f6c503df80","method":"POST","headers":{":authority":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6ec9d4d8-25d8-483a-9c39-04f6c503df80","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6ec9d4d8-25d8-483a-9c39-04f6c503df80","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"]}} {"level":"debug","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6ec9d4d8-25d8-483a-9c39-04f6c503df80","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ec9d4d8-25d8-483a-9c39-04f6c503df80","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ec9d4d8-25d8-483a-9c39-04f6c503df80","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ec9d4d8-25d8-483a-9c39-04f6c503df80","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9c9be0/auth-test-model-9c9be0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6ec9d4d8-25d8-483a-9c39-04f6c503df80","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ec9d4d8-25d8-483a-9c39-04f6c503df80","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ec9d4d8-25d8-483a-9c39-04f6c503df80","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ec9d4d8-25d8-483a-9c39-04f6c503df80","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ec9d4d8-25d8-483a-9c39-04f6c503df80","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ccd57d5-b4ab-42b6-83a0-5d2795f566de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53772","PortSpecifier":{"PortValue":53772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8ccd57d5-b4ab-42b6-83a0-5d2795f566de","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ccd57d5-b4ab-42b6-83a0-5d2795f566de","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53772","PortSpecifier":{"PortValue":53772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362551,"nanos":864758411},"http":{"id":"8ccd57d5-b4ab-42b6-83a0-5d2795f566de","method":"POST","headers":{":authority":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8ccd57d5-b4ab-42b6-83a0-5d2795f566de","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8ccd57d5-b4ab-42b6-83a0-5d2795f566de","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"]}} {"level":"debug","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8ccd57d5-b4ab-42b6-83a0-5d2795f566de","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ccd57d5-b4ab-42b6-83a0-5d2795f566de","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ccd57d5-b4ab-42b6-83a0-5d2795f566de","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ccd57d5-b4ab-42b6-83a0-5d2795f566de","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b6a5ee/auth-test-model-b6a5ee\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8ccd57d5-b4ab-42b6-83a0-5d2795f566de","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ccd57d5-b4ab-42b6-83a0-5d2795f566de","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ccd57d5-b4ab-42b6-83a0-5d2795f566de","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ccd57d5-b4ab-42b6-83a0-5d2795f566de","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:29:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ccd57d5-b4ab-42b6-83a0-5d2795f566de","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:29:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25c3fddf-0f5c-497c-beb2-e91fb471d804","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39266","PortSpecifier":{"PortValue":39266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"25c3fddf-0f5c-497c-beb2-e91fb471d804","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:29:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"25c3fddf-0f5c-497c-beb2-e91fb471d804","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39266","PortSpecifier":{"PortValue":39266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362564,"nanos":926421083},"http":{"id":"25c3fddf-0f5c-497c-beb2-e91fb471d804","method":"POST","headers":{":authority":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:29:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"25c3fddf-0f5c-497c-beb2-e91fb471d804","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:29:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"25c3fddf-0f5c-497c-beb2-e91fb471d804","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"]}} {"level":"debug","ts":"2026-07-06T18:29:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"25c3fddf-0f5c-497c-beb2-e91fb471d804","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:29:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25c3fddf-0f5c-497c-beb2-e91fb471d804","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:29:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25c3fddf-0f5c-497c-beb2-e91fb471d804","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:29:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"25c3fddf-0f5c-497c-beb2-e91fb471d804","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9c9be0/auth-test-model-9c9be0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:29:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"25c3fddf-0f5c-497c-beb2-e91fb471d804","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:29:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25c3fddf-0f5c-497c-beb2-e91fb471d804","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:29:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"25c3fddf-0f5c-497c-beb2-e91fb471d804","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T18:29:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25c3fddf-0f5c-497c-beb2-e91fb471d804","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:29:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"25c3fddf-0f5c-497c-beb2-e91fb471d804","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:29:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32dc636d-c756-4cf3-b524-0f0167e9823a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34476","PortSpecifier":{"PortValue":34476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"32dc636d-c756-4cf3-b524-0f0167e9823a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:29:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32dc636d-c756-4cf3-b524-0f0167e9823a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34476","PortSpecifier":{"PortValue":34476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362564,"nanos":967203000},"http":{"id":"32dc636d-c756-4cf3-b524-0f0167e9823a","method":"POST","headers":{":authority":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:29:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"32dc636d-c756-4cf3-b524-0f0167e9823a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:29:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"32dc636d-c756-4cf3-b524-0f0167e9823a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"]}} {"level":"debug","ts":"2026-07-06T18:29:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"32dc636d-c756-4cf3-b524-0f0167e9823a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:29:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32dc636d-c756-4cf3-b524-0f0167e9823a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:29:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32dc636d-c756-4cf3-b524-0f0167e9823a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:29:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32dc636d-c756-4cf3-b524-0f0167e9823a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b6a5ee/auth-test-model-b6a5ee\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:29:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"32dc636d-c756-4cf3-b524-0f0167e9823a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:29:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32dc636d-c756-4cf3-b524-0f0167e9823a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:29:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32dc636d-c756-4cf3-b524-0f0167e9823a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:29:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32dc636d-c756-4cf3-b524-0f0167e9823a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:29:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32dc636d-c756-4cf3-b524-0f0167e9823a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:29:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a59a1b1b-ad54-4480-89db-38925a29db14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34484","PortSpecifier":{"PortValue":34484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a59a1b1b-ad54-4480-89db-38925a29db14","method":"GET","path":"/maas-api/v1/api-keys/484da798-5ba9-482f-b3dc-19aa325b0d1a","host":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:29:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a59a1b1b-ad54-4480-89db-38925a29db14","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:34484","PortSpecifier":{"PortValue":34484}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362565,"nanos":6787071},"http":{"id":"a59a1b1b-ad54-4480-89db-38925a29db14","method":"GET","headers":{":authority":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/484da798-5ba9-482f-b3dc-19aa325b0d1a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:29:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a59a1b1b-ad54-4480-89db-38925a29db14","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:29:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a59a1b1b-ad54-4480-89db-38925a29db14","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"]}} {"level":"debug","ts":"2026-07-06T18:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a59a1b1b-ad54-4480-89db-38925a29db14","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/484da798-5ba9-482f-b3dc-19aa325b0d1a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a59a1b1b-ad54-4480-89db-38925a29db14","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a59a1b1b-ad54-4480-89db-38925a29db14","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a59a1b1b-ad54-4480-89db-38925a29db14","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b6a5ee/auth-test-model-b6a5ee\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a59a1b1b-ad54-4480-89db-38925a29db14","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a59a1b1b-ad54-4480-89db-38925a29db14","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a59a1b1b-ad54-4480-89db-38925a29db14","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:29:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a59a1b1b-ad54-4480-89db-38925a29db14","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:29:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a59a1b1b-ad54-4480-89db-38925a29db14","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:29:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c2881f2-9572-4f7a-b76b-8d0545d14f78","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39276","PortSpecifier":{"PortValue":39276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5c2881f2-9572-4f7a-b76b-8d0545d14f78","method":"GET","path":"/maas-api/v1/api-keys/484da798-5ba9-482f-b3dc-19aa325b0d1a","host":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:29:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c2881f2-9572-4f7a-b76b-8d0545d14f78","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:39276","PortSpecifier":{"PortValue":39276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362565,"nanos":39981838},"http":{"id":"5c2881f2-9572-4f7a-b76b-8d0545d14f78","method":"GET","headers":{":authority":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/484da798-5ba9-482f-b3dc-19aa325b0d1a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:29:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5c2881f2-9572-4f7a-b76b-8d0545d14f78","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:29:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5c2881f2-9572-4f7a-b76b-8d0545d14f78","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"]}} {"level":"debug","ts":"2026-07-06T18:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5c2881f2-9572-4f7a-b76b-8d0545d14f78","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/484da798-5ba9-482f-b3dc-19aa325b0d1a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c2881f2-9572-4f7a-b76b-8d0545d14f78","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c2881f2-9572-4f7a-b76b-8d0545d14f78","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c2881f2-9572-4f7a-b76b-8d0545d14f78","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9c9be0/auth-test-model-9c9be0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5c2881f2-9572-4f7a-b76b-8d0545d14f78","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c2881f2-9572-4f7a-b76b-8d0545d14f78","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c2881f2-9572-4f7a-b76b-8d0545d14f78","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:29:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c2881f2-9572-4f7a-b76b-8d0545d14f78","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:29:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c2881f2-9572-4f7a-b76b-8d0545d14f78","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:29:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ffd02ac1-d6c0-4cf7-a999-933fbf6c817f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55710","PortSpecifier":{"PortValue":55710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ffd02ac1-d6c0-4cf7-a999-933fbf6c817f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:29:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ffd02ac1-d6c0-4cf7-a999-933fbf6c817f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55710","PortSpecifier":{"PortValue":55710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362578,"nanos":107931459},"http":{"id":"ffd02ac1-d6c0-4cf7-a999-933fbf6c817f","method":"POST","headers":{":authority":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:29:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ffd02ac1-d6c0-4cf7-a999-933fbf6c817f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:29:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ffd02ac1-d6c0-4cf7-a999-933fbf6c817f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"]}} {"level":"debug","ts":"2026-07-06T18:29:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ffd02ac1-d6c0-4cf7-a999-933fbf6c817f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:29:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ffd02ac1-d6c0-4cf7-a999-933fbf6c817f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:29:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ffd02ac1-d6c0-4cf7-a999-933fbf6c817f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:29:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ffd02ac1-d6c0-4cf7-a999-933fbf6c817f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9c9be0/auth-test-model-9c9be0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:29:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ffd02ac1-d6c0-4cf7-a999-933fbf6c817f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:29:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ffd02ac1-d6c0-4cf7-a999-933fbf6c817f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:29:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ffd02ac1-d6c0-4cf7-a999-933fbf6c817f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T18:29:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ffd02ac1-d6c0-4cf7-a999-933fbf6c817f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:29:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ffd02ac1-d6c0-4cf7-a999-933fbf6c817f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:29:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70ff28fc-f95d-409a-badd-9cafd63df54f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55646","PortSpecifier":{"PortValue":55646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"70ff28fc-f95d-409a-badd-9cafd63df54f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:29:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"70ff28fc-f95d-409a-badd-9cafd63df54f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55646","PortSpecifier":{"PortValue":55646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362578,"nanos":152409540},"http":{"id":"70ff28fc-f95d-409a-badd-9cafd63df54f","method":"POST","headers":{":authority":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:29:38Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"70ff28fc-f95d-409a-badd-9cafd63df54f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:29:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"70ff28fc-f95d-409a-badd-9cafd63df54f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"]}} {"level":"debug","ts":"2026-07-06T18:29:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"70ff28fc-f95d-409a-badd-9cafd63df54f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:29:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70ff28fc-f95d-409a-badd-9cafd63df54f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:29:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70ff28fc-f95d-409a-badd-9cafd63df54f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:29:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"70ff28fc-f95d-409a-badd-9cafd63df54f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b6a5ee/auth-test-model-b6a5ee\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:29:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"70ff28fc-f95d-409a-badd-9cafd63df54f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:29:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70ff28fc-f95d-409a-badd-9cafd63df54f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:29:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"70ff28fc-f95d-409a-badd-9cafd63df54f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:29:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70ff28fc-f95d-409a-badd-9cafd63df54f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:29:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"70ff28fc-f95d-409a-badd-9cafd63df54f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:29:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3625768b-2414-4039-883b-8bdba03692c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55712","PortSpecifier":{"PortValue":55712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3625768b-2414-4039-883b-8bdba03692c1","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:29:38Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3625768b-2414-4039-883b-8bdba03692c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:55712","PortSpecifier":{"PortValue":55712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362578,"nanos":193513641},"http":{"id":"3625768b-2414-4039-883b-8bdba03692c1","method":"POST","headers":{":authority":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:29:38Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3625768b-2414-4039-883b-8bdba03692c1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1HRQjFa41RRKpIB5L_2Yaoh0K4VAgeHfHod8mRT8Fx8BWKViOadFPBZaIzAwM"} {"level":"debug","ts":"2026-07-06T18:29:38Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3625768b-2414-4039-883b-8bdba03692c1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9c9be0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1HRQjFa41RRKpIB5L_2Yaoh0K4VAgeHfHod8mRT8Fx8BWKViOadFPBZaIzAwM\"}"} {"level":"debug","ts":"2026-07-06T18:29:38Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3625768b-2414-4039-883b-8bdba03692c1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9c9be0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b4195e0c-9c93-4909-8216-3774b34b5410","keyName":"e2e-auth-iso-a-d8209e","subscription":"e2e-auth-iso-8ca192","tenant":"e2e-shared-a-9c9be0","userId":"b4195e0c-9c93-4909-8216-3774b34b5410","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T18:29:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3625768b-2414-4039-883b-8bdba03692c1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:29:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3625768b-2414-4039-883b-8bdba03692c1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:29:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3625768b-2414-4039-883b-8bdba03692c1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:29:38Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3625768b-2414-4039-883b-8bdba03692c1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9c9be0/auth-test-model-9c9be0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:29:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3625768b-2414-4039-883b-8bdba03692c1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:29:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3625768b-2414-4039-883b-8bdba03692c1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-8ca192"} {"level":"debug","ts":"2026-07-06T18:29:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3625768b-2414-4039-883b-8bdba03692c1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-06T18:29:38Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3625768b-2414-4039-883b-8bdba03692c1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:29:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3625768b-2414-4039-883b-8bdba03692c1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:29:38Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3625768b-2414-4039-883b-8bdba03692c1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:29:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/802f0b057d39fbd16870ef7b71008b985e9631db99725a3aa2283d47c9e8c13f"} {"level":"info","ts":"2026-07-06T18:29:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89b2852234f00ea57af08ee108db012dd268eaf640b70c3ddff7aa21d990e7e5"} {"level":"info","ts":"2026-07-06T18:29:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f2fe5903f28d344b665f0f1f24922370ac5efcee60809ca773f872092a6bce8"} {"level":"info","ts":"2026-07-06T18:29:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/304e727345b108efb98bba73db2985fc012955acaf08de5b62f8013eb99e46b1"} {"level":"info","ts":"2026-07-06T18:29:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6cde64b971d51b02ef3435c95a21336462418018b68c5ebb873cf05531bca5c"} {"level":"info","ts":"2026-07-06T18:29:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba6bc598579bf7e2f718aa71dfff58ac1f941582bb157c4c722340d891b2b38b"} {"level":"info","ts":"2026-07-06T18:29:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d2b3abc482b7172f49d62c2da7a78266b9936e72f2f659b5eb9ab955018d1c9"} {"level":"info","ts":"2026-07-06T18:29:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1baa436f744abcba13a644d5f3234b9d9eda384171bc6dd6a24a0ccab422426"} {"level":"info","ts":"2026-07-06T18:29:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45f6a32e6a4a986d98ac32a8b6460129d0be349203a2702106f24c5d94e4e915"} {"level":"info","ts":"2026-07-06T18:29:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be5e89d09511c4c85da0586cd4e9341da5181ee931d0596f6fbadb78eeead706"} {"level":"info","ts":"2026-07-06T18:29:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc6fff2154a6453a9213ba4f9332d89b55789fb28e39fd7f5a24345dc0eca6fc"} {"level":"info","ts":"2026-07-06T18:29:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a1c222aa6a3639d0cb0c0ef1fc06cf960c0eddbbfb5f632eaf65d3ed6df21229"} {"level":"info","ts":"2026-07-06T18:29:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2b111e53fdc740ef93a40d4ec82edcd5dfb8d20d537bb0efee0a3c42083e5c7"} {"level":"info","ts":"2026-07-06T18:29:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8613efde139592fdc55d804655945ea67814be6ff50223c6f74bf9edcfa55809"} {"level":"info","ts":"2026-07-06T18:29:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a062ec54f12a24f2d5df8c603cf08115e71bbe17d421fe9a4a37a773932d38f"} {"level":"info","ts":"2026-07-06T18:29:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d3048f5bfa1beb1a5b41a78ce0b1966c7e4df8694010e4fb9e12014577033ad9"} {"level":"debug","ts":"2026-07-06T18:29:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aed9bd4f2a13a51a957e54fa0a9c3c4f2da920d4cf58393532dc8e4e6383ab10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:29:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:29:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:29:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aed9bd4f2a13a51a957e54fa0a9c3c4f2da920d4cf58393532dc8e4e6383ab10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aed9bd4f2a13a51a957e54fa0a9c3c4f2da920d4cf58393532dc8e4e6383ab10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aed9bd4f2a13a51a957e54fa0a9c3c4f2da920d4cf58393532dc8e4e6383ab10","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:29:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aed9bd4f2a13a51a957e54fa0a9c3c4f2da920d4cf58393532dc8e4e6383ab10"} {"level":"debug","ts":"2026-07-06T18:29:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aed9bd4f2a13a51a957e54fa0a9c3c4f2da920d4cf58393532dc8e4e6383ab10","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:29:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aed9bd4f2a13a51a957e54fa0a9c3c4f2da920d4cf58393532dc8e4e6383ab10"} {"level":"debug","ts":"2026-07-06T18:29:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aed9bd4f2a13a51a957e54fa0a9c3c4f2da920d4cf58393532dc8e4e6383ab10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:29:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:29:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aed9bd4f2a13a51a957e54fa0a9c3c4f2da920d4cf58393532dc8e4e6383ab10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:29:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aed9bd4f2a13a51a957e54fa0a9c3c4f2da920d4cf58393532dc8e4e6383ab10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aed9bd4f2a13a51a957e54fa0a9c3c4f2da920d4cf58393532dc8e4e6383ab10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:29:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:29:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:29:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aed9bd4f2a13a51a957e54fa0a9c3c4f2da920d4cf58393532dc8e4e6383ab10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aed9bd4f2a13a51a957e54fa0a9c3c4f2da920d4cf58393532dc8e4e6383ab10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aed9bd4f2a13a51a957e54fa0a9c3c4f2da920d4cf58393532dc8e4e6383ab10","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:29:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aed9bd4f2a13a51a957e54fa0a9c3c4f2da920d4cf58393532dc8e4e6383ab10"} {"level":"debug","ts":"2026-07-06T18:29:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aed9bd4f2a13a51a957e54fa0a9c3c4f2da920d4cf58393532dc8e4e6383ab10","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:29:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aed9bd4f2a13a51a957e54fa0a9c3c4f2da920d4cf58393532dc8e4e6383ab10"} {"level":"debug","ts":"2026-07-06T18:29:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aed9bd4f2a13a51a957e54fa0a9c3c4f2da920d4cf58393532dc8e4e6383ab10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:29:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:29:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aed9bd4f2a13a51a957e54fa0a9c3c4f2da920d4cf58393532dc8e4e6383ab10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:29:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aed9bd4f2a13a51a957e54fa0a9c3c4f2da920d4cf58393532dc8e4e6383ab10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aed9bd4f2a13a51a957e54fa0a9c3c4f2da920d4cf58393532dc8e4e6383ab10","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:29:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aed9bd4f2a13a51a957e54fa0a9c3c4f2da920d4cf58393532dc8e4e6383ab10"} {"level":"debug","ts":"2026-07-06T18:29:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a04d9ad79eaddb743b7f561467051a20b03753c7f9fa6a3a56b157e739087a9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:29:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:29:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:29:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a04d9ad79eaddb743b7f561467051a20b03753c7f9fa6a3a56b157e739087a9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a04d9ad79eaddb743b7f561467051a20b03753c7f9fa6a3a56b157e739087a9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:29:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:29:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:29:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a04d9ad79eaddb743b7f561467051a20b03753c7f9fa6a3a56b157e739087a9d"} {"level":"info","ts":"2026-07-06T18:29:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a04d9ad79eaddb743b7f561467051a20b03753c7f9fa6a3a56b157e739087a9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a04d9ad79eaddb743b7f561467051a20b03753c7f9fa6a3a56b157e739087a9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:29:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:29:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T18:29:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a04d9ad79eaddb743b7f561467051a20b03753c7f9fa6a3a56b157e739087a9d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a04d9ad79eaddb743b7f561467051a20b03753c7f9fa6a3a56b157e739087a9d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T18:29:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a04d9ad79eaddb743b7f561467051a20b03753c7f9fa6a3a56b157e739087a9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a04d9ad79eaddb743b7f561467051a20b03753c7f9fa6a3a56b157e739087a9d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:29:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a04d9ad79eaddb743b7f561467051a20b03753c7f9fa6a3a56b157e739087a9d"} {"level":"info","ts":"2026-07-06T18:29:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a04d9ad79eaddb743b7f561467051a20b03753c7f9fa6a3a56b157e739087a9d"} {"level":"debug","ts":"2026-07-06T18:29:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee517338667660a14e420eb719c3887d17bc980e4a2952abd345fbe53339adbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:29:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:29:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:29:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee517338667660a14e420eb719c3887d17bc980e4a2952abd345fbe53339adbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee517338667660a14e420eb719c3887d17bc980e4a2952abd345fbe53339adbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee517338667660a14e420eb719c3887d17bc980e4a2952abd345fbe53339adbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a04d9ad79eaddb743b7f561467051a20b03753c7f9fa6a3a56b157e739087a9d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:29:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:29:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a04d9ad79eaddb743b7f561467051a20b03753c7f9fa6a3a56b157e739087a9d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:29:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee517338667660a14e420eb719c3887d17bc980e4a2952abd345fbe53339adbe"} {"level":"info","ts":"2026-07-06T18:29:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a04d9ad79eaddb743b7f561467051a20b03753c7f9fa6a3a56b157e739087a9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a04d9ad79eaddb743b7f561467051a20b03753c7f9fa6a3a56b157e739087a9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee517338667660a14e420eb719c3887d17bc980e4a2952abd345fbe53339adbe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:29:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee517338667660a14e420eb719c3887d17bc980e4a2952abd345fbe53339adbe"} {"level":"info","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a04d9ad79eaddb743b7f561467051a20b03753c7f9fa6a3a56b157e739087a9d"} {"level":"debug","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee517338667660a14e420eb719c3887d17bc980e4a2952abd345fbe53339adbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:29:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:29:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee517338667660a14e420eb719c3887d17bc980e4a2952abd345fbe53339adbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee517338667660a14e420eb719c3887d17bc980e4a2952abd345fbe53339adbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee517338667660a14e420eb719c3887d17bc980e4a2952abd345fbe53339adbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:29:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:29:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee517338667660a14e420eb719c3887d17bc980e4a2952abd345fbe53339adbe"} {"level":"info","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee517338667660a14e420eb719c3887d17bc980e4a2952abd345fbe53339adbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:29:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:29:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca"} {"level":"info","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee517338667660a14e420eb719c3887d17bc980e4a2952abd345fbe53339adbe"} {"level":"info","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ee517338667660a14e420eb719c3887d17bc980e4a2952abd345fbe53339adbe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:29:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:29:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ee517338667660a14e420eb719c3887d17bc980e4a2952abd345fbe53339adbe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ee517338667660a14e420eb719c3887d17bc980e4a2952abd345fbe53339adbe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee517338667660a14e420eb719c3887d17bc980e4a2952abd345fbe53339adbe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca"} {"level":"debug","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:29:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:29:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee517338667660a14e420eb719c3887d17bc980e4a2952abd345fbe53339adbe"} {"level":"info","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:29:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:29:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca"} {"level":"debug","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca"} {"level":"debug","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:29:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:29:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:29:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:29:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca"} {"level":"debug","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b8fb4e0d85cba0f02a848f2c7654d93bfa84c8b8c6d88aceaafe7722bd3bdf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:29:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:29:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca"} {"level":"info","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b8fb4e0d85cba0f02a848f2c7654d93bfa84c8b8c6d88aceaafe7722bd3bdf8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b8fb4e0d85cba0f02a848f2c7654d93bfa84c8b8c6d88aceaafe7722bd3bdf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:29:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:29:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b8fb4e0d85cba0f02a848f2c7654d93bfa84c8b8c6d88aceaafe7722bd3bdf8"} {"level":"info","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b8fb4e0d85cba0f02a848f2c7654d93bfa84c8b8c6d88aceaafe7722bd3bdf8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:29:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:29:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b8fb4e0d85cba0f02a848f2c7654d93bfa84c8b8c6d88aceaafe7722bd3bdf8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:29:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:29:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b8fb4e0d85cba0f02a848f2c7654d93bfa84c8b8c6d88aceaafe7722bd3bdf8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe"} {"level":"info","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b8fb4e0d85cba0f02a848f2c7654d93bfa84c8b8c6d88aceaafe7722bd3bdf8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:29:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:29:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b8fb4e0d85cba0f02a848f2c7654d93bfa84c8b8c6d88aceaafe7722bd3bdf8"} {"level":"info","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b5a548ea4ccd78216ed584b71098bbe39fba3792d9a05f86c93bd1e95ca681d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:29:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:29:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b5a548ea4ccd78216ed584b71098bbe39fba3792d9a05f86c93bd1e95ca681d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:29:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:29:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b8fb4e0d85cba0f02a848f2c7654d93bfa84c8b8c6d88aceaafe7722bd3bdf8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f9e42d2d972a92bbb25dab988e868651dfefaa5ca80e871b9252b8e28d93b73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:29:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:29:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b5a548ea4ccd78216ed584b71098bbe39fba3792d9a05f86c93bd1e95ca681d"} {"level":"info","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f9e42d2d972a92bbb25dab988e868651dfefaa5ca80e871b9252b8e28d93b73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b5a548ea4ccd78216ed584b71098bbe39fba3792d9a05f86c93bd1e95ca681d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:29:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:29:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b5a548ea4ccd78216ed584b71098bbe39fba3792d9a05f86c93bd1e95ca681d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b5a548ea4ccd78216ed584b71098bbe39fba3792d9a05f86c93bd1e95ca681d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:29:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:29:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f9e42d2d972a92bbb25dab988e868651dfefaa5ca80e871b9252b8e28d93b73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b5a548ea4ccd78216ed584b71098bbe39fba3792d9a05f86c93bd1e95ca681d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f9e42d2d972a92bbb25dab988e868651dfefaa5ca80e871b9252b8e28d93b73","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe"} {"level":"debug","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:29:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:29:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b8fb4e0d85cba0f02a848f2c7654d93bfa84c8b8c6d88aceaafe7722bd3bdf8"} {"level":"info","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f9e42d2d972a92bbb25dab988e868651dfefaa5ca80e871b9252b8e28d93b73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca"} {"level":"info","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f9e42d2d972a92bbb25dab988e868651dfefaa5ca80e871b9252b8e28d93b73"} {"level":"debug","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f9e42d2d972a92bbb25dab988e868651dfefaa5ca80e871b9252b8e28d93b73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:29:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:29:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f9e42d2d972a92bbb25dab988e868651dfefaa5ca80e871b9252b8e28d93b73"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f9e42d2d972a92bbb25dab988e868651dfefaa5ca80e871b9252b8e28d93b73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f9e42d2d972a92bbb25dab988e868651dfefaa5ca80e871b9252b8e28d93b73","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b5a548ea4ccd78216ed584b71098bbe39fba3792d9a05f86c93bd1e95ca681d"} {"level":"info","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe"} {"level":"info","ts":"2026-07-06T18:29:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f9e42d2d972a92bbb25dab988e868651dfefaa5ca80e871b9252b8e28d93b73"} {"level":"debug","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:30:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:30:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f"} {"level":"debug","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f"} {"level":"debug","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:30:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:30:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:30:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:30:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a006ad0c82d5239f0c9cc3c266e1ccec56651048fdac23c40f081e8bf9380f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:30:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:30:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f"} {"level":"info","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a006ad0c82d5239f0c9cc3c266e1ccec56651048fdac23c40f081e8bf9380f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:30:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:30:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a006ad0c82d5239f0c9cc3c266e1ccec56651048fdac23c40f081e8bf9380f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:30:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:30:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a006ad0c82d5239f0c9cc3c266e1ccec56651048fdac23c40f081e8bf9380f3"} {"level":"info","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a006ad0c82d5239f0c9cc3c266e1ccec56651048fdac23c40f081e8bf9380f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:30:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:30:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a006ad0c82d5239f0c9cc3c266e1ccec56651048fdac23c40f081e8bf9380f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:30:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:30:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a006ad0c82d5239f0c9cc3c266e1ccec56651048fdac23c40f081e8bf9380f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f"} {"level":"info","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a006ad0c82d5239f0c9cc3c266e1ccec56651048fdac23c40f081e8bf9380f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:30:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:30:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a006ad0c82d5239f0c9cc3c266e1ccec56651048fdac23c40f081e8bf9380f3"} {"level":"info","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a006ad0c82d5239f0c9cc3c266e1ccec56651048fdac23c40f081e8bf9380f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:30:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:30:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f"} {"level":"debug","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:30:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:30:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a006ad0c82d5239f0c9cc3c266e1ccec56651048fdac23c40f081e8bf9380f3"} {"level":"info","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:30:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:30:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f"} {"level":"info","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f"} {"level":"debug","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f"} {"level":"debug","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a721c5e996deb1229afa3828b83d64053d5a72af80c98f45b9942a50cadd29ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:30:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:30:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a721c5e996deb1229afa3828b83d64053d5a72af80c98f45b9942a50cadd29ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a721c5e996deb1229afa3828b83d64053d5a72af80c98f45b9942a50cadd29ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a721c5e996deb1229afa3828b83d64053d5a72af80c98f45b9942a50cadd29ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:30:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:30:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a721c5e996deb1229afa3828b83d64053d5a72af80c98f45b9942a50cadd29ce"} {"level":"info","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a721c5e996deb1229afa3828b83d64053d5a72af80c98f45b9942a50cadd29ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a721c5e996deb1229afa3828b83d64053d5a72af80c98f45b9942a50cadd29ce"} {"level":"info","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f"} {"level":"debug","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a721c5e996deb1229afa3828b83d64053d5a72af80c98f45b9942a50cadd29ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:30:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:30:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a721c5e996deb1229afa3828b83d64053d5a72af80c98f45b9942a50cadd29ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a721c5e996deb1229afa3828b83d64053d5a72af80c98f45b9942a50cadd29ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a721c5e996deb1229afa3828b83d64053d5a72af80c98f45b9942a50cadd29ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9be29a76b65506f8c5302bcd294fd3c988ba4f80343e70c5c263e9bf98fa12fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:30:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:30:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9be29a76b65506f8c5302bcd294fd3c988ba4f80343e70c5c263e9bf98fa12fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be29a76b65506f8c5302bcd294fd3c988ba4f80343e70c5c263e9bf98fa12fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a721c5e996deb1229afa3828b83d64053d5a72af80c98f45b9942a50cadd29ce"} {"level":"debug","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9be29a76b65506f8c5302bcd294fd3c988ba4f80343e70c5c263e9bf98fa12fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:30:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:30:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9be29a76b65506f8c5302bcd294fd3c988ba4f80343e70c5c263e9bf98fa12fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be29a76b65506f8c5302bcd294fd3c988ba4f80343e70c5c263e9bf98fa12fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9be29a76b65506f8c5302bcd294fd3c988ba4f80343e70c5c263e9bf98fa12fd"} {"level":"debug","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be29a76b65506f8c5302bcd294fd3c988ba4f80343e70c5c263e9bf98fa12fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9be29a76b65506f8c5302bcd294fd3c988ba4f80343e70c5c263e9bf98fa12fd"} {"level":"debug","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:30:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:30:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:30:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:30:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022"} {"level":"info","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:30:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:30:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9be29a76b65506f8c5302bcd294fd3c988ba4f80343e70c5c263e9bf98fa12fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:30:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:30:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9be29a76b65506f8c5302bcd294fd3c988ba4f80343e70c5c263e9bf98fa12fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022"} {"level":"info","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9be29a76b65506f8c5302bcd294fd3c988ba4f80343e70c5c263e9bf98fa12fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be29a76b65506f8c5302bcd294fd3c988ba4f80343e70c5c263e9bf98fa12fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022"} {"level":"info","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9be29a76b65506f8c5302bcd294fd3c988ba4f80343e70c5c263e9bf98fa12fd"} {"level":"debug","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:30:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:30:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022"} {"level":"debug","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:30:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:30:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38706dc747e8768e8fe9f1b2c6c4b7ad4c31d39c1f9f676c41bb6657c0ce1a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:30:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:30:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65"} {"level":"info","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38706dc747e8768e8fe9f1b2c6c4b7ad4c31d39c1f9f676c41bb6657c0ce1a2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:30:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:30:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38706dc747e8768e8fe9f1b2c6c4b7ad4c31d39c1f9f676c41bb6657c0ce1a2d"} {"level":"info","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38706dc747e8768e8fe9f1b2c6c4b7ad4c31d39c1f9f676c41bb6657c0ce1a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:30:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:30:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38706dc747e8768e8fe9f1b2c6c4b7ad4c31d39c1f9f676c41bb6657c0ce1a2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38706dc747e8768e8fe9f1b2c6c4b7ad4c31d39c1f9f676c41bb6657c0ce1a2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:30:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:30:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65"} {"level":"info","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38706dc747e8768e8fe9f1b2c6c4b7ad4c31d39c1f9f676c41bb6657c0ce1a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:30:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:30:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38706dc747e8768e8fe9f1b2c6c4b7ad4c31d39c1f9f676c41bb6657c0ce1a2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:30:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:30:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38706dc747e8768e8fe9f1b2c6c4b7ad4c31d39c1f9f676c41bb6657c0ce1a2d"} {"level":"info","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38706dc747e8768e8fe9f1b2c6c4b7ad4c31d39c1f9f676c41bb6657c0ce1a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:30:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:30:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38706dc747e8768e8fe9f1b2c6c4b7ad4c31d39c1f9f676c41bb6657c0ce1a2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65"} {"level":"info","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38706dc747e8768e8fe9f1b2c6c4b7ad4c31d39c1f9f676c41bb6657c0ce1a2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38706dc747e8768e8fe9f1b2c6c4b7ad4c31d39c1f9f676c41bb6657c0ce1a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:30:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:30:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38706dc747e8768e8fe9f1b2c6c4b7ad4c31d39c1f9f676c41bb6657c0ce1a2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38706dc747e8768e8fe9f1b2c6c4b7ad4c31d39c1f9f676c41bb6657c0ce1a2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38706dc747e8768e8fe9f1b2c6c4b7ad4c31d39c1f9f676c41bb6657c0ce1a2d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38706dc747e8768e8fe9f1b2c6c4b7ad4c31d39c1f9f676c41bb6657c0ce1a2d"} {"level":"debug","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38706dc747e8768e8fe9f1b2c6c4b7ad4c31d39c1f9f676c41bb6657c0ce1a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:30:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:30:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38706dc747e8768e8fe9f1b2c6c4b7ad4c31d39c1f9f676c41bb6657c0ce1a2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38706dc747e8768e8fe9f1b2c6c4b7ad4c31d39c1f9f676c41bb6657c0ce1a2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38706dc747e8768e8fe9f1b2c6c4b7ad4c31d39c1f9f676c41bb6657c0ce1a2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2583be309ddd1a78898151139a3860c708b90c0e22fd8deced02e702695ebb4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:30:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:30:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65"} {"level":"info","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2583be309ddd1a78898151139a3860c708b90c0e22fd8deced02e702695ebb4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2583be309ddd1a78898151139a3860c708b90c0e22fd8deced02e702695ebb4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2583be309ddd1a78898151139a3860c708b90c0e22fd8deced02e702695ebb4d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38706dc747e8768e8fe9f1b2c6c4b7ad4c31d39c1f9f676c41bb6657c0ce1a2d"} {"level":"debug","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2583be309ddd1a78898151139a3860c708b90c0e22fd8deced02e702695ebb4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:30:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:30:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2583be309ddd1a78898151139a3860c708b90c0e22fd8deced02e702695ebb4d"} {"level":"info","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2583be309ddd1a78898151139a3860c708b90c0e22fd8deced02e702695ebb4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2583be309ddd1a78898151139a3860c708b90c0e22fd8deced02e702695ebb4d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2583be309ddd1a78898151139a3860c708b90c0e22fd8deced02e702695ebb4d"} {"level":"debug","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2583be309ddd1a78898151139a3860c708b90c0e22fd8deced02e702695ebb4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:30:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:30:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2583be309ddd1a78898151139a3860c708b90c0e22fd8deced02e702695ebb4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2583be309ddd1a78898151139a3860c708b90c0e22fd8deced02e702695ebb4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2583be309ddd1a78898151139a3860c708b90c0e22fd8deced02e702695ebb4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:30:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:30:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2583be309ddd1a78898151139a3860c708b90c0e22fd8deced02e702695ebb4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2583be309ddd1a78898151139a3860c708b90c0e22fd8deced02e702695ebb4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2583be309ddd1a78898151139a3860c708b90c0e22fd8deced02e702695ebb4d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2583be309ddd1a78898151139a3860c708b90c0e22fd8deced02e702695ebb4d"} {"level":"debug","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2583be309ddd1a78898151139a3860c708b90c0e22fd8deced02e702695ebb4d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2583be309ddd1a78898151139a3860c708b90c0e22fd8deced02e702695ebb4d"} {"level":"debug","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2583be309ddd1a78898151139a3860c708b90c0e22fd8deced02e702695ebb4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:30:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:30:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2583be309ddd1a78898151139a3860c708b90c0e22fd8deced02e702695ebb4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2583be309ddd1a78898151139a3860c708b90c0e22fd8deced02e702695ebb4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2583be309ddd1a78898151139a3860c708b90c0e22fd8deced02e702695ebb4d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2583be309ddd1a78898151139a3860c708b90c0e22fd8deced02e702695ebb4d"} {"level":"debug","ts":"2026-07-06T18:30:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:30:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:30:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65"} {"level":"debug","ts":"2026-07-06T18:30:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65"} {"level":"debug","ts":"2026-07-06T18:30:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:30:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:30:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:30:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:30:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f9e42d2d972a92bbb25dab988e868651dfefaa5ca80e871b9252b8e28d93b73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65"} {"level":"debug","ts":"2026-07-06T18:30:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:30:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:30:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f9e42d2d972a92bbb25dab988e868651dfefaa5ca80e871b9252b8e28d93b73"} {"level":"info","ts":"2026-07-06T18:30:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:30:27Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:30:27Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65"} {"level":"info","ts":"2026-07-06T18:30:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65"} {"level":"debug","ts":"2026-07-06T18:30:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65"} {"level":"debug","ts":"2026-07-06T18:30:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:30:27Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:30:27Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65"} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:30:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:30:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca"} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca"} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:30:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:30:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:30:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:30:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb539fccfa77279580de490c14160e472a149cc12231a1af5e51639957d72d05","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca"} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:30:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:30:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb539fccfa77279580de490c14160e472a149cc12231a1af5e51639957d72d05"} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:30:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:30:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca"} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca"} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca"} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9be29a76b65506f8c5302bcd294fd3c988ba4f80343e70c5c263e9bf98fa12fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:30:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:30:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9be29a76b65506f8c5302bcd294fd3c988ba4f80343e70c5c263e9bf98fa12fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be29a76b65506f8c5302bcd294fd3c988ba4f80343e70c5c263e9bf98fa12fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9be29a76b65506f8c5302bcd294fd3c988ba4f80343e70c5c263e9bf98fa12fd"} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be29a76b65506f8c5302bcd294fd3c988ba4f80343e70c5c263e9bf98fa12fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:30:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:30:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be29a76b65506f8c5302bcd294fd3c988ba4f80343e70c5c263e9bf98fa12fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9be29a76b65506f8c5302bcd294fd3c988ba4f80343e70c5c263e9bf98fa12fd"} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca"} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9be29a76b65506f8c5302bcd294fd3c988ba4f80343e70c5c263e9bf98fa12fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:30:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:30:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9be29a76b65506f8c5302bcd294fd3c988ba4f80343e70c5c263e9bf98fa12fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9be29a76b65506f8c5302bcd294fd3c988ba4f80343e70c5c263e9bf98fa12fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:30:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:30:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9be29a76b65506f8c5302bcd294fd3c988ba4f80343e70c5c263e9bf98fa12fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022"} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:30:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:30:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9be29a76b65506f8c5302bcd294fd3c988ba4f80343e70c5c263e9bf98fa12fd"} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:30:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:30:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022"} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022"} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a006ad0c82d5239f0c9cc3c266e1ccec56651048fdac23c40f081e8bf9380f3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022"} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a006ad0c82d5239f0c9cc3c266e1ccec56651048fdac23c40f081e8bf9380f3"} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:30:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:30:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:30:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:30:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022"} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022"} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:30:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:30:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe"} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:30:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:30:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe"} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022"} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:30:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:30:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:30:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:30:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2583be309ddd1a78898151139a3860c708b90c0e22fd8deced02e702695ebb4d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe"} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:30:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:30:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2583be309ddd1a78898151139a3860c708b90c0e22fd8deced02e702695ebb4d"} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:30:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:30:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe"} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe"} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:30:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:30:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe"} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:30:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:30:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f"} {"level":"debug","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f"} {"level":"debug","ts":"2026-07-06T18:30:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:30:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:30:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b5a548ea4ccd78216ed584b71098bbe39fba3792d9a05f86c93bd1e95ca681d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f"} {"level":"info","ts":"2026-07-06T18:30:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b5a548ea4ccd78216ed584b71098bbe39fba3792d9a05f86c93bd1e95ca681d"} {"level":"debug","ts":"2026-07-06T18:30:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a721c5e996deb1229afa3828b83d64053d5a72af80c98f45b9942a50cadd29ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a721c5e996deb1229afa3828b83d64053d5a72af80c98f45b9942a50cadd29ce"} {"level":"debug","ts":"2026-07-06T18:30:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:30:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:30:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0166686bf4362045ed04a3aab2b50e6c4fa64f22ab130da1941e2525dcea833c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee"} {"level":"debug","ts":"2026-07-06T18:30:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b8fb4e0d85cba0f02a848f2c7654d93bfa84c8b8c6d88aceaafe7722bd3bdf8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:30:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:30:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0166686bf4362045ed04a3aab2b50e6c4fa64f22ab130da1941e2525dcea833c"} {"level":"info","ts":"2026-07-06T18:30:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38706dc747e8768e8fe9f1b2c6c4b7ad4c31d39c1f9f676c41bb6657c0ce1a2d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:30:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:30:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee"} {"level":"info","ts":"2026-07-06T18:30:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aed9bd4f2a13a51a957e54fa0a9c3c4f2da920d4cf58393532dc8e4e6383ab10","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:30:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:30:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b8fb4e0d85cba0f02a848f2c7654d93bfa84c8b8c6d88aceaafe7722bd3bdf8"} {"level":"info","ts":"2026-07-06T18:30:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:30:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:30:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:30:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38706dc747e8768e8fe9f1b2c6c4b7ad4c31d39c1f9f676c41bb6657c0ce1a2d"} {"level":"info","ts":"2026-07-06T18:30:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee"} {"level":"error","ts":"2026-07-06T18:30:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T18:30:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a04d9ad79eaddb743b7f561467051a20b03753c7f9fa6a3a56b157e739087a9d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:30:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aed9bd4f2a13a51a957e54fa0a9c3c4f2da920d4cf58393532dc8e4e6383ab10"} {"level":"debug","ts":"2026-07-06T18:30:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ee517338667660a14e420eb719c3887d17bc980e4a2952abd345fbe53339adbe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a04d9ad79eaddb743b7f561467051a20b03753c7f9fa6a3a56b157e739087a9d"} {"level":"debug","ts":"2026-07-06T18:30:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:30:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ee517338667660a14e420eb719c3887d17bc980e4a2952abd345fbe53339adbe"} {"level":"info","ts":"2026-07-06T18:30:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d"} {"level":"info","ts":"2026-07-06T18:30:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8264f2d6-1e93-4fb4-a7c5-72af4964b773","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44490","PortSpecifier":{"PortValue":44490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8264f2d6-1e93-4fb4-a7c5-72af4964b773","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:30:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8264f2d6-1e93-4fb4-a7c5-72af4964b773","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44490","PortSpecifier":{"PortValue":44490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362631,"nanos":894536977},"http":{"id":"8264f2d6-1e93-4fb4-a7c5-72af4964b773","method":"POST","headers":{":authority":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:30:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8264f2d6-1e93-4fb4-a7c5-72af4964b773","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:30:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8264f2d6-1e93-4fb4-a7c5-72af4964b773","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"]}} {"level":"debug","ts":"2026-07-06T18:30:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8264f2d6-1e93-4fb4-a7c5-72af4964b773","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:30:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8264f2d6-1e93-4fb4-a7c5-72af4964b773","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:30:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8264f2d6-1e93-4fb4-a7c5-72af4964b773","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:30:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8264f2d6-1e93-4fb4-a7c5-72af4964b773","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9c9be0/sub-test-model-9c9be0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:30:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8264f2d6-1e93-4fb4-a7c5-72af4964b773","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:30:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8264f2d6-1e93-4fb4-a7c5-72af4964b773","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:30:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8264f2d6-1e93-4fb4-a7c5-72af4964b773","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:30:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8264f2d6-1e93-4fb4-a7c5-72af4964b773","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:30:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8264f2d6-1e93-4fb4-a7c5-72af4964b773","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:30:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"307ed62c-d059-4cbc-a4b8-f7ef9a3cd654","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:54430","PortSpecifier":{"PortValue":54430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"307ed62c-d059-4cbc-a4b8-f7ef9a3cd654","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:30:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"307ed62c-d059-4cbc-a4b8-f7ef9a3cd654","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:54430","PortSpecifier":{"PortValue":54430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362631,"nanos":932617313},"http":{"id":"307ed62c-d059-4cbc-a4b8-f7ef9a3cd654","method":"POST","headers":{":authority":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:30:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"307ed62c-d059-4cbc-a4b8-f7ef9a3cd654","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:30:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"307ed62c-d059-4cbc-a4b8-f7ef9a3cd654","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"]}} {"level":"debug","ts":"2026-07-06T18:30:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"307ed62c-d059-4cbc-a4b8-f7ef9a3cd654","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:30:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"307ed62c-d059-4cbc-a4b8-f7ef9a3cd654","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:30:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"307ed62c-d059-4cbc-a4b8-f7ef9a3cd654","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:30:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"307ed62c-d059-4cbc-a4b8-f7ef9a3cd654","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b6a5ee/sub-test-model-b6a5ee\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:30:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"307ed62c-d059-4cbc-a4b8-f7ef9a3cd654","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:30:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"307ed62c-d059-4cbc-a4b8-f7ef9a3cd654","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:30:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"307ed62c-d059-4cbc-a4b8-f7ef9a3cd654","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:30:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"307ed62c-d059-4cbc-a4b8-f7ef9a3cd654","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:30:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"307ed62c-d059-4cbc-a4b8-f7ef9a3cd654","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:30:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c5d2c6d-ab2f-47c4-a52c-0a2ea9e051df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44504","PortSpecifier":{"PortValue":44504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9c5d2c6d-ab2f-47c4-a52c-0a2ea9e051df","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:30:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c5d2c6d-ab2f-47c4-a52c-0a2ea9e051df","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44504","PortSpecifier":{"PortValue":44504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362631,"nanos":968556122},"http":{"id":"9c5d2c6d-ab2f-47c4-a52c-0a2ea9e051df","method":"GET","headers":{":authority":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:30:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9c5d2c6d-ab2f-47c4-a52c-0a2ea9e051df","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11YGNUfTiU0Y2eDaU_As4TsxDahcdUBrnN8RB8LcXN0CKpLljz9pAVJcUMfjj"} {"level":"debug","ts":"2026-07-06T18:30:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9c5d2c6d-ab2f-47c4-a52c-0a2ea9e051df","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9c9be0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11YGNUfTiU0Y2eDaU_As4TsxDahcdUBrnN8RB8LcXN0CKpLljz9pAVJcUMfjj\"}"} {"level":"debug","ts":"2026-07-06T18:30:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9c5d2c6d-ab2f-47c4-a52c-0a2ea9e051df","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9c9be0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f4152d5d-52f1-437d-9bec-85bbe2f87144","keyName":"e2e-sub-iso-f9024c","subscription":"e2e-a-only-62b431","tenant":"e2e-shared-a-9c9be0","userId":"f4152d5d-52f1-437d-9bec-85bbe2f87144","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T18:30:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9c5d2c6d-ab2f-47c4-a52c-0a2ea9e051df","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:30:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c5d2c6d-ab2f-47c4-a52c-0a2ea9e051df","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:30:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c5d2c6d-ab2f-47c4-a52c-0a2ea9e051df","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:30:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c5d2c6d-ab2f-47c4-a52c-0a2ea9e051df","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9c9be0/sub-test-model-9c9be0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:30:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9c5d2c6d-ab2f-47c4-a52c-0a2ea9e051df","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-06T18:30:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c5d2c6d-ab2f-47c4-a52c-0a2ea9e051df","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:30:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c5d2c6d-ab2f-47c4-a52c-0a2ea9e051df","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-62b431"} {"level":"debug","ts":"2026-07-06T18:30:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c5d2c6d-ab2f-47c4-a52c-0a2ea9e051df","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:30:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c5d2c6d-ab2f-47c4-a52c-0a2ea9e051df","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:30:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c5d2c6d-ab2f-47c4-a52c-0a2ea9e051df","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:30:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92a38e47-c4de-4a6a-9ac7-3ba482de2be4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:54442","PortSpecifier":{"PortValue":54442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"92a38e47-c4de-4a6a-9ac7-3ba482de2be4","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:30:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92a38e47-c4de-4a6a-9ac7-3ba482de2be4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:54442","PortSpecifier":{"PortValue":54442}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362631,"nanos":998829392},"http":{"id":"92a38e47-c4de-4a6a-9ac7-3ba482de2be4","method":"GET","headers":{":authority":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:30:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"92a38e47-c4de-4a6a-9ac7-3ba482de2be4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-HyAEzafSb5gOJP0K_FpBnSabpPY7vN7Sw0DPDGM8zeLAUheYiGC4MXrs5GQE"} {"level":"debug","ts":"2026-07-06T18:30:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"92a38e47-c4de-4a6a-9ac7-3ba482de2be4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b6a5ee.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-HyAEzafSb5gOJP0K_FpBnSabpPY7vN7Sw0DPDGM8zeLAUheYiGC4MXrs5GQE\"}"} {"level":"debug","ts":"2026-07-06T18:30:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"92a38e47-c4de-4a6a-9ac7-3ba482de2be4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b6a5ee.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"72264b7c-275a-4392-8700-e1099d4f300d","keyName":"e2e-sub-iso-18498c","subscription":"e2e-b-only-62b431","tenant":"e2e-shared-b-b6a5ee","userId":"72264b7c-275a-4392-8700-e1099d4f300d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T18:30:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"92a38e47-c4de-4a6a-9ac7-3ba482de2be4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:30:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92a38e47-c4de-4a6a-9ac7-3ba482de2be4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:30:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92a38e47-c4de-4a6a-9ac7-3ba482de2be4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:30:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92a38e47-c4de-4a6a-9ac7-3ba482de2be4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b6a5ee/sub-test-model-b6a5ee\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:30:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92a38e47-c4de-4a6a-9ac7-3ba482de2be4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-62b431"} {"level":"debug","ts":"2026-07-06T18:30:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92a38e47-c4de-4a6a-9ac7-3ba482de2be4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:30:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92a38e47-c4de-4a6a-9ac7-3ba482de2be4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:30:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"92a38e47-c4de-4a6a-9ac7-3ba482de2be4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-06T18:30:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92a38e47-c4de-4a6a-9ac7-3ba482de2be4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:30:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92a38e47-c4de-4a6a-9ac7-3ba482de2be4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:30:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99d4e43d-18e6-4a69-8c76-e8a1e37f484a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46154","PortSpecifier":{"PortValue":46154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"99d4e43d-18e6-4a69-8c76-e8a1e37f484a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:30:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99d4e43d-18e6-4a69-8c76-e8a1e37f484a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46154","PortSpecifier":{"PortValue":46154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362639,"nanos":914577328},"http":{"id":"99d4e43d-18e6-4a69-8c76-e8a1e37f484a","method":"POST","headers":{":authority":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:30:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"99d4e43d-18e6-4a69-8c76-e8a1e37f484a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:30:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"99d4e43d-18e6-4a69-8c76-e8a1e37f484a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"]}} {"level":"debug","ts":"2026-07-06T18:30:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"99d4e43d-18e6-4a69-8c76-e8a1e37f484a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:30:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99d4e43d-18e6-4a69-8c76-e8a1e37f484a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:30:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99d4e43d-18e6-4a69-8c76-e8a1e37f484a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:30:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99d4e43d-18e6-4a69-8c76-e8a1e37f484a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9c9be0/sub-test-model-9c9be0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:30:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"99d4e43d-18e6-4a69-8c76-e8a1e37f484a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:30:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99d4e43d-18e6-4a69-8c76-e8a1e37f484a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:30:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"99d4e43d-18e6-4a69-8c76-e8a1e37f484a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:30:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99d4e43d-18e6-4a69-8c76-e8a1e37f484a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:30:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99d4e43d-18e6-4a69-8c76-e8a1e37f484a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:30:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fae14e79-3d44-4da5-b09c-472905c87c8b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49862","PortSpecifier":{"PortValue":49862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fae14e79-3d44-4da5-b09c-472905c87c8b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:30:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fae14e79-3d44-4da5-b09c-472905c87c8b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49862","PortSpecifier":{"PortValue":49862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362639,"nanos":957452611},"http":{"id":"fae14e79-3d44-4da5-b09c-472905c87c8b","method":"POST","headers":{":authority":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:30:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fae14e79-3d44-4da5-b09c-472905c87c8b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:30:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fae14e79-3d44-4da5-b09c-472905c87c8b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"]}} {"level":"debug","ts":"2026-07-06T18:30:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fae14e79-3d44-4da5-b09c-472905c87c8b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:30:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fae14e79-3d44-4da5-b09c-472905c87c8b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:30:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fae14e79-3d44-4da5-b09c-472905c87c8b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:30:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fae14e79-3d44-4da5-b09c-472905c87c8b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b6a5ee/sub-test-model-b6a5ee\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:30:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fae14e79-3d44-4da5-b09c-472905c87c8b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:30:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fae14e79-3d44-4da5-b09c-472905c87c8b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:30:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fae14e79-3d44-4da5-b09c-472905c87c8b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:30:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fae14e79-3d44-4da5-b09c-472905c87c8b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:30:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fae14e79-3d44-4da5-b09c-472905c87c8b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:30:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92e137a7-c5d6-42ee-abd9-1bfe86c00683","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46156","PortSpecifier":{"PortValue":46156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"92e137a7-c5d6-42ee-abd9-1bfe86c00683","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:30:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"92e137a7-c5d6-42ee-abd9-1bfe86c00683","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:46156","PortSpecifier":{"PortValue":46156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362639,"nanos":997108685},"http":{"id":"92e137a7-c5d6-42ee-abd9-1bfe86c00683","method":"POST","headers":{":authority":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:30:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"92e137a7-c5d6-42ee-abd9-1bfe86c00683","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-y6esiEzH7lmWM8Eo_syVOsjc1BSuajmWzzuMdeCh5Xfn3yq7rs6TRivBMh5R"} {"level":"debug","ts":"2026-07-06T18:30:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"92e137a7-c5d6-42ee-abd9-1bfe86c00683","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9c9be0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-y6esiEzH7lmWM8Eo_syVOsjc1BSuajmWzzuMdeCh5Xfn3yq7rs6TRivBMh5R\"}"} {"level":"debug","ts":"2026-07-06T18:30:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"92e137a7-c5d6-42ee-abd9-1bfe86c00683","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9c9be0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d33695e0-35a2-401a-8a0a-67280ee0980a","keyName":"e2e-sub-iso-934848","subscription":"e2e-shared-sub-7354de","tenant":"e2e-shared-a-9c9be0","userId":"d33695e0-35a2-401a-8a0a-67280ee0980a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T18:30:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"92e137a7-c5d6-42ee-abd9-1bfe86c00683","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:30:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92e137a7-c5d6-42ee-abd9-1bfe86c00683","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:30:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92e137a7-c5d6-42ee-abd9-1bfe86c00683","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:30:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"92e137a7-c5d6-42ee-abd9-1bfe86c00683","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9c9be0/sub-test-model-9c9be0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:30:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"92e137a7-c5d6-42ee-abd9-1bfe86c00683","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-06T18:30:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92e137a7-c5d6-42ee-abd9-1bfe86c00683","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:30:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92e137a7-c5d6-42ee-abd9-1bfe86c00683","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-7354de"} {"level":"debug","ts":"2026-07-06T18:30:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"92e137a7-c5d6-42ee-abd9-1bfe86c00683","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:30:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92e137a7-c5d6-42ee-abd9-1bfe86c00683","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:30:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"92e137a7-c5d6-42ee-abd9-1bfe86c00683","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:30:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4862c583-b688-48b0-96a1-2f601ffa9a29","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49874","PortSpecifier":{"PortValue":49874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4862c583-b688-48b0-96a1-2f601ffa9a29","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:30:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4862c583-b688-48b0-96a1-2f601ffa9a29","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:49874","PortSpecifier":{"PortValue":49874}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362640,"nanos":24933717},"http":{"id":"4862c583-b688-48b0-96a1-2f601ffa9a29","method":"POST","headers":{":authority":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:30:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4862c583-b688-48b0-96a1-2f601ffa9a29","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1SmDL4acslvdu8pQ3_DYz4rcI8DCmQCMq1bVtBjcyUNuO1MCwARhpyrmsWjTc"} {"level":"debug","ts":"2026-07-06T18:30:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4862c583-b688-48b0-96a1-2f601ffa9a29","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b6a5ee.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1SmDL4acslvdu8pQ3_DYz4rcI8DCmQCMq1bVtBjcyUNuO1MCwARhpyrmsWjTc\"}"} {"level":"debug","ts":"2026-07-06T18:30:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4862c583-b688-48b0-96a1-2f601ffa9a29","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b6a5ee.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"557ef7fd-93cc-413d-a071-4b90588fde36","keyName":"e2e-sub-iso-13f243","subscription":"e2e-shared-sub-7354de","tenant":"e2e-shared-b-b6a5ee","userId":"557ef7fd-93cc-413d-a071-4b90588fde36","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T18:30:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4862c583-b688-48b0-96a1-2f601ffa9a29","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:30:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4862c583-b688-48b0-96a1-2f601ffa9a29","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:30:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4862c583-b688-48b0-96a1-2f601ffa9a29","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:30:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4862c583-b688-48b0-96a1-2f601ffa9a29","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b6a5ee/sub-test-model-b6a5ee\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:30:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4862c583-b688-48b0-96a1-2f601ffa9a29","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-7354de"} {"level":"debug","ts":"2026-07-06T18:30:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4862c583-b688-48b0-96a1-2f601ffa9a29","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:30:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4862c583-b688-48b0-96a1-2f601ffa9a29","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:30:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4862c583-b688-48b0-96a1-2f601ffa9a29","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-06T18:30:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4862c583-b688-48b0-96a1-2f601ffa9a29","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:30:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4862c583-b688-48b0-96a1-2f601ffa9a29","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee517338667660a14e420eb719c3887d17bc980e4a2952abd345fbe53339adbe"} {"level":"info","ts":"2026-07-06T18:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a04d9ad79eaddb743b7f561467051a20b03753c7f9fa6a3a56b157e739087a9d"} {"level":"info","ts":"2026-07-06T18:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a721c5e996deb1229afa3828b83d64053d5a72af80c98f45b9942a50cadd29ce"} {"level":"info","ts":"2026-07-06T18:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50fe61e83f711ff94ba9678afa2a348855a4bf522a81b001bbd7dac4abffbd65"} {"level":"info","ts":"2026-07-06T18:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30719873b914205a09b88339c795cbe85d481653f2cce074fe1fe3b14eb9b88f"} {"level":"info","ts":"2026-07-06T18:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a006ad0c82d5239f0c9cc3c266e1ccec56651048fdac23c40f081e8bf9380f3"} {"level":"info","ts":"2026-07-06T18:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6b8fb4e0d85cba0f02a848f2c7654d93bfa84c8b8c6d88aceaafe7722bd3bdf8"} {"level":"info","ts":"2026-07-06T18:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ce79155880822033cc6c04d491c997d380775c8c1e504669e374a0a833071022"} {"level":"info","ts":"2026-07-06T18:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f9e42d2d972a92bbb25dab988e868651dfefaa5ca80e871b9252b8e28d93b73"} {"level":"info","ts":"2026-07-06T18:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38706dc747e8768e8fe9f1b2c6c4b7ad4c31d39c1f9f676c41bb6657c0ce1a2d"} {"level":"info","ts":"2026-07-06T18:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aed9bd4f2a13a51a957e54fa0a9c3c4f2da920d4cf58393532dc8e4e6383ab10"} {"level":"info","ts":"2026-07-06T18:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2583be309ddd1a78898151139a3860c708b90c0e22fd8deced02e702695ebb4d"} {"level":"info","ts":"2026-07-06T18:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9be29a76b65506f8c5302bcd294fd3c988ba4f80343e70c5c263e9bf98fa12fd"} {"level":"info","ts":"2026-07-06T18:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86bd98a6d6109544114bbc028d41e68ec42a2d2689367bf208f1f45916fabebe"} {"level":"info","ts":"2026-07-06T18:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b979908d9a13112444ca8716a1671d65ad7d8b22292cee829e8a68b238df52ca"} {"level":"info","ts":"2026-07-06T18:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b5a548ea4ccd78216ed584b71098bbe39fba3792d9a05f86c93bd1e95ca681d"} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53df67608d5abc43924c768cf7345306aa2627316105abec286ccd36d20a9da4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53df67608d5abc43924c768cf7345306aa2627316105abec286ccd36d20a9da4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53df67608d5abc43924c768cf7345306aa2627316105abec286ccd36d20a9da4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53df67608d5abc43924c768cf7345306aa2627316105abec286ccd36d20a9da4"} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53df67608d5abc43924c768cf7345306aa2627316105abec286ccd36d20a9da4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53df67608d5abc43924c768cf7345306aa2627316105abec286ccd36d20a9da4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53df67608d5abc43924c768cf7345306aa2627316105abec286ccd36d20a9da4"} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53df67608d5abc43924c768cf7345306aa2627316105abec286ccd36d20a9da4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53df67608d5abc43924c768cf7345306aa2627316105abec286ccd36d20a9da4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53df67608d5abc43924c768cf7345306aa2627316105abec286ccd36d20a9da4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53df67608d5abc43924c768cf7345306aa2627316105abec286ccd36d20a9da4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53df67608d5abc43924c768cf7345306aa2627316105abec286ccd36d20a9da4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eba3f69bd68bdf24a23af98bb9d9f26748b7e5bb05df259ffb6d2bf2262ba43b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53df67608d5abc43924c768cf7345306aa2627316105abec286ccd36d20a9da4"} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eba3f69bd68bdf24a23af98bb9d9f26748b7e5bb05df259ffb6d2bf2262ba43b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53df67608d5abc43924c768cf7345306aa2627316105abec286ccd36d20a9da4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53df67608d5abc43924c768cf7345306aa2627316105abec286ccd36d20a9da4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53df67608d5abc43924c768cf7345306aa2627316105abec286ccd36d20a9da4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eba3f69bd68bdf24a23af98bb9d9f26748b7e5bb05df259ffb6d2bf2262ba43b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eba3f69bd68bdf24a23af98bb9d9f26748b7e5bb05df259ffb6d2bf2262ba43b"} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eba3f69bd68bdf24a23af98bb9d9f26748b7e5bb05df259ffb6d2bf2262ba43b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53df67608d5abc43924c768cf7345306aa2627316105abec286ccd36d20a9da4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53df67608d5abc43924c768cf7345306aa2627316105abec286ccd36d20a9da4"} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53df67608d5abc43924c768cf7345306aa2627316105abec286ccd36d20a9da4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eba3f69bd68bdf24a23af98bb9d9f26748b7e5bb05df259ffb6d2bf2262ba43b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53df67608d5abc43924c768cf7345306aa2627316105abec286ccd36d20a9da4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53df67608d5abc43924c768cf7345306aa2627316105abec286ccd36d20a9da4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53df67608d5abc43924c768cf7345306aa2627316105abec286ccd36d20a9da4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53df67608d5abc43924c768cf7345306aa2627316105abec286ccd36d20a9da4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53df67608d5abc43924c768cf7345306aa2627316105abec286ccd36d20a9da4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eba3f69bd68bdf24a23af98bb9d9f26748b7e5bb05df259ffb6d2bf2262ba43b"} {"level":"error","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"53df67608d5abc43924c768cf7345306aa2627316105abec286ccd36d20a9da4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"53df67608d5abc43924c768cf7345306aa2627316105abec286ccd36d20a9da4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eba3f69bd68bdf24a23af98bb9d9f26748b7e5bb05df259ffb6d2bf2262ba43b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eba3f69bd68bdf24a23af98bb9d9f26748b7e5bb05df259ffb6d2bf2262ba43b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eba3f69bd68bdf24a23af98bb9d9f26748b7e5bb05df259ffb6d2bf2262ba43b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53df67608d5abc43924c768cf7345306aa2627316105abec286ccd36d20a9da4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53df67608d5abc43924c768cf7345306aa2627316105abec286ccd36d20a9da4"} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53df67608d5abc43924c768cf7345306aa2627316105abec286ccd36d20a9da4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc932d6b35dda28719f6617a0f1673df854d3ae01a06618be296e8932a8c943a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc932d6b35dda28719f6617a0f1673df854d3ae01a06618be296e8932a8c943a"} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc932d6b35dda28719f6617a0f1673df854d3ae01a06618be296e8932a8c943a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eba3f69bd68bdf24a23af98bb9d9f26748b7e5bb05df259ffb6d2bf2262ba43b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eba3f69bd68bdf24a23af98bb9d9f26748b7e5bb05df259ffb6d2bf2262ba43b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"183d761bee4541a0ceb7f6b659e0f7df3ee5b852d216b17f8f1015e192edc529","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eba3f69bd68bdf24a23af98bb9d9f26748b7e5bb05df259ffb6d2bf2262ba43b"} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"183d761bee4541a0ceb7f6b659e0f7df3ee5b852d216b17f8f1015e192edc529","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53df67608d5abc43924c768cf7345306aa2627316105abec286ccd36d20a9da4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53df67608d5abc43924c768cf7345306aa2627316105abec286ccd36d20a9da4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53df67608d5abc43924c768cf7345306aa2627316105abec286ccd36d20a9da4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc932d6b35dda28719f6617a0f1673df854d3ae01a06618be296e8932a8c943a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc932d6b35dda28719f6617a0f1673df854d3ae01a06618be296e8932a8c943a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/183d761bee4541a0ceb7f6b659e0f7df3ee5b852d216b17f8f1015e192edc529"} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc932d6b35dda28719f6617a0f1673df854d3ae01a06618be296e8932a8c943a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eba3f69bd68bdf24a23af98bb9d9f26748b7e5bb05df259ffb6d2bf2262ba43b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eba3f69bd68bdf24a23af98bb9d9f26748b7e5bb05df259ffb6d2bf2262ba43b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53df67608d5abc43924c768cf7345306aa2627316105abec286ccd36d20a9da4"} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eba3f69bd68bdf24a23af98bb9d9f26748b7e5bb05df259ffb6d2bf2262ba43b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"183d761bee4541a0ceb7f6b659e0f7df3ee5b852d216b17f8f1015e192edc529","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["183d761bee4541a0ceb7f6b659e0f7df3ee5b852d216b17f8f1015e192edc529"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"183d761bee4541a0ceb7f6b659e0f7df3ee5b852d216b17f8f1015e192edc529","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53df67608d5abc43924c768cf7345306aa2627316105abec286ccd36d20a9da4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc932d6b35dda28719f6617a0f1673df854d3ae01a06618be296e8932a8c943a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc932d6b35dda28719f6617a0f1673df854d3ae01a06618be296e8932a8c943a"} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc932d6b35dda28719f6617a0f1673df854d3ae01a06618be296e8932a8c943a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eba3f69bd68bdf24a23af98bb9d9f26748b7e5bb05df259ffb6d2bf2262ba43b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eba3f69bd68bdf24a23af98bb9d9f26748b7e5bb05df259ffb6d2bf2262ba43b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"183d761bee4541a0ceb7f6b659e0f7df3ee5b852d216b17f8f1015e192edc529","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1657fe718bc2ecaea94d8322cbdab8cb3cc6fa8da4cd425bf3fbc9d2988eff0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eba3f69bd68bdf24a23af98bb9d9f26748b7e5bb05df259ffb6d2bf2262ba43b"} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1657fe718bc2ecaea94d8322cbdab8cb3cc6fa8da4cd425bf3fbc9d2988eff0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc932d6b35dda28719f6617a0f1673df854d3ae01a06618be296e8932a8c943a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc932d6b35dda28719f6617a0f1673df854d3ae01a06618be296e8932a8c943a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/183d761bee4541a0ceb7f6b659e0f7df3ee5b852d216b17f8f1015e192edc529"} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc932d6b35dda28719f6617a0f1673df854d3ae01a06618be296e8932a8c943a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eba3f69bd68bdf24a23af98bb9d9f26748b7e5bb05df259ffb6d2bf2262ba43b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eba3f69bd68bdf24a23af98bb9d9f26748b7e5bb05df259ffb6d2bf2262ba43b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eba3f69bd68bdf24a23af98bb9d9f26748b7e5bb05df259ffb6d2bf2262ba43b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1657fe718bc2ecaea94d8322cbdab8cb3cc6fa8da4cd425bf3fbc9d2988eff0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1657fe718bc2ecaea94d8322cbdab8cb3cc6fa8da4cd425bf3fbc9d2988eff0"} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1657fe718bc2ecaea94d8322cbdab8cb3cc6fa8da4cd425bf3fbc9d2988eff0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc932d6b35dda28719f6617a0f1673df854d3ae01a06618be296e8932a8c943a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc932d6b35dda28719f6617a0f1673df854d3ae01a06618be296e8932a8c943a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eba3f69bd68bdf24a23af98bb9d9f26748b7e5bb05df259ffb6d2bf2262ba43b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1657fe718bc2ecaea94d8322cbdab8cb3cc6fa8da4cd425bf3fbc9d2988eff0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1657fe718bc2ecaea94d8322cbdab8cb3cc6fa8da4cd425bf3fbc9d2988eff0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc932d6b35dda28719f6617a0f1673df854d3ae01a06618be296e8932a8c943a"} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1657fe718bc2ecaea94d8322cbdab8cb3cc6fa8da4cd425bf3fbc9d2988eff0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc932d6b35dda28719f6617a0f1673df854d3ae01a06618be296e8932a8c943a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc932d6b35dda28719f6617a0f1673df854d3ae01a06618be296e8932a8c943a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc932d6b35dda28719f6617a0f1673df854d3ae01a06618be296e8932a8c943a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1657fe718bc2ecaea94d8322cbdab8cb3cc6fa8da4cd425bf3fbc9d2988eff0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc932d6b35dda28719f6617a0f1673df854d3ae01a06618be296e8932a8c943a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eba3f69bd68bdf24a23af98bb9d9f26748b7e5bb05df259ffb6d2bf2262ba43b"} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1657fe718bc2ecaea94d8322cbdab8cb3cc6fa8da4cd425bf3fbc9d2988eff0"} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc932d6b35dda28719f6617a0f1673df854d3ae01a06618be296e8932a8c943a"} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80cf73e6f8f2a5225618d1bca299213556e83feff14028f195cc7c252b0f82c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80cf73e6f8f2a5225618d1bca299213556e83feff14028f195cc7c252b0f82c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80cf73e6f8f2a5225618d1bca299213556e83feff14028f195cc7c252b0f82c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80cf73e6f8f2a5225618d1bca299213556e83feff14028f195cc7c252b0f82c8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80cf73e6f8f2a5225618d1bca299213556e83feff14028f195cc7c252b0f82c8"} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80cf73e6f8f2a5225618d1bca299213556e83feff14028f195cc7c252b0f82c8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80cf73e6f8f2a5225618d1bca299213556e83feff14028f195cc7c252b0f82c8"} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80cf73e6f8f2a5225618d1bca299213556e83feff14028f195cc7c252b0f82c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80cf73e6f8f2a5225618d1bca299213556e83feff14028f195cc7c252b0f82c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80cf73e6f8f2a5225618d1bca299213556e83feff14028f195cc7c252b0f82c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80cf73e6f8f2a5225618d1bca299213556e83feff14028f195cc7c252b0f82c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80cf73e6f8f2a5225618d1bca299213556e83feff14028f195cc7c252b0f82c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80cf73e6f8f2a5225618d1bca299213556e83feff14028f195cc7c252b0f82c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80cf73e6f8f2a5225618d1bca299213556e83feff14028f195cc7c252b0f82c8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80cf73e6f8f2a5225618d1bca299213556e83feff14028f195cc7c252b0f82c8"} {"level":"debug","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80cf73e6f8f2a5225618d1bca299213556e83feff14028f195cc7c252b0f82c8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80cf73e6f8f2a5225618d1bca299213556e83feff14028f195cc7c252b0f82c8"} {"level":"debug","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80cf73e6f8f2a5225618d1bca299213556e83feff14028f195cc7c252b0f82c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80cf73e6f8f2a5225618d1bca299213556e83feff14028f195cc7c252b0f82c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80cf73e6f8f2a5225618d1bca299213556e83feff14028f195cc7c252b0f82c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80cf73e6f8f2a5225618d1bca299213556e83feff14028f195cc7c252b0f82c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80cf73e6f8f2a5225618d1bca299213556e83feff14028f195cc7c252b0f82c8"} {"level":"info","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80cf73e6f8f2a5225618d1bca299213556e83feff14028f195cc7c252b0f82c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7e80f80e15550298694580d5b295cb9c5f7f3a3a56075350094dd2d2b764acc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7e80f80e15550298694580d5b295cb9c5f7f3a3a56075350094dd2d2b764acc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80cf73e6f8f2a5225618d1bca299213556e83feff14028f195cc7c252b0f82c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80cf73e6f8f2a5225618d1bca299213556e83feff14028f195cc7c252b0f82c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7e80f80e15550298694580d5b295cb9c5f7f3a3a56075350094dd2d2b764acc"} {"level":"info","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80cf73e6f8f2a5225618d1bca299213556e83feff14028f195cc7c252b0f82c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7e80f80e15550298694580d5b295cb9c5f7f3a3a56075350094dd2d2b764acc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7e80f80e15550298694580d5b295cb9c5f7f3a3a56075350094dd2d2b764acc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7e80f80e15550298694580d5b295cb9c5f7f3a3a56075350094dd2d2b764acc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80cf73e6f8f2a5225618d1bca299213556e83feff14028f195cc7c252b0f82c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80cf73e6f8f2a5225618d1bca299213556e83feff14028f195cc7c252b0f82c8"} {"level":"info","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80cf73e6f8f2a5225618d1bca299213556e83feff14028f195cc7c252b0f82c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7e80f80e15550298694580d5b295cb9c5f7f3a3a56075350094dd2d2b764acc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7e80f80e15550298694580d5b295cb9c5f7f3a3a56075350094dd2d2b764acc"} {"level":"info","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7e80f80e15550298694580d5b295cb9c5f7f3a3a56075350094dd2d2b764acc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80cf73e6f8f2a5225618d1bca299213556e83feff14028f195cc7c252b0f82c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7e80f80e15550298694580d5b295cb9c5f7f3a3a56075350094dd2d2b764acc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7e80f80e15550298694580d5b295cb9c5f7f3a3a56075350094dd2d2b764acc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7e80f80e15550298694580d5b295cb9c5f7f3a3a56075350094dd2d2b764acc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80cf73e6f8f2a5225618d1bca299213556e83feff14028f195cc7c252b0f82c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7e80f80e15550298694580d5b295cb9c5f7f3a3a56075350094dd2d2b764acc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7e80f80e15550298694580d5b295cb9c5f7f3a3a56075350094dd2d2b764acc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80cf73e6f8f2a5225618d1bca299213556e83feff14028f195cc7c252b0f82c8"} {"level":"error","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c7e80f80e15550298694580d5b295cb9c5f7f3a3a56075350094dd2d2b764acc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c7e80f80e15550298694580d5b295cb9c5f7f3a3a56075350094dd2d2b764acc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7e80f80e15550298694580d5b295cb9c5f7f3a3a56075350094dd2d2b764acc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7e80f80e15550298694580d5b295cb9c5f7f3a3a56075350094dd2d2b764acc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80cf73e6f8f2a5225618d1bca299213556e83feff14028f195cc7c252b0f82c8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["80cf73e6f8f2a5225618d1bca299213556e83feff14028f195cc7c252b0f82c8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7e80f80e15550298694580d5b295cb9c5f7f3a3a56075350094dd2d2b764acc"} {"level":"info","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80cf73e6f8f2a5225618d1bca299213556e83feff14028f195cc7c252b0f82c8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7e80f80e15550298694580d5b295cb9c5f7f3a3a56075350094dd2d2b764acc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80cf73e6f8f2a5225618d1bca299213556e83feff14028f195cc7c252b0f82c8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7e80f80e15550298694580d5b295cb9c5f7f3a3a56075350094dd2d2b764acc"} {"level":"debug","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7e80f80e15550298694580d5b295cb9c5f7f3a3a56075350094dd2d2b764acc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7e80f80e15550298694580d5b295cb9c5f7f3a3a56075350094dd2d2b764acc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80cf73e6f8f2a5225618d1bca299213556e83feff14028f195cc7c252b0f82c8"} {"level":"info","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7e80f80e15550298694580d5b295cb9c5f7f3a3a56075350094dd2d2b764acc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7e80f80e15550298694580d5b295cb9c5f7f3a3a56075350094dd2d2b764acc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7e80f80e15550298694580d5b295cb9c5f7f3a3a56075350094dd2d2b764acc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7e80f80e15550298694580d5b295cb9c5f7f3a3a56075350094dd2d2b764acc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7e80f80e15550298694580d5b295cb9c5f7f3a3a56075350094dd2d2b764acc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7e80f80e15550298694580d5b295cb9c5f7f3a3a56075350094dd2d2b764acc"} {"level":"debug","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7e80f80e15550298694580d5b295cb9c5f7f3a3a56075350094dd2d2b764acc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7e80f80e15550298694580d5b295cb9c5f7f3a3a56075350094dd2d2b764acc"} {"level":"debug","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d"} {"level":"info","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c7e80f80e15550298694580d5b295cb9c5f7f3a3a56075350094dd2d2b764acc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c7e80f80e15550298694580d5b295cb9c5f7f3a3a56075350094dd2d2b764acc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c7e80f80e15550298694580d5b295cb9c5f7f3a3a56075350094dd2d2b764acc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7e80f80e15550298694580d5b295cb9c5f7f3a3a56075350094dd2d2b764acc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d"} {"level":"debug","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7e80f80e15550298694580d5b295cb9c5f7f3a3a56075350094dd2d2b764acc"} {"level":"info","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d"} {"level":"debug","ts":"2026-07-06T18:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc14c31eda0dd40bf3ea881f4170106df757e6636c79c0c770727c38f55a8343","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc14c31eda0dd40bf3ea881f4170106df757e6636c79c0c770727c38f55a8343","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc14c31eda0dd40bf3ea881f4170106df757e6636c79c0c770727c38f55a8343","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc14c31eda0dd40bf3ea881f4170106df757e6636c79c0c770727c38f55a8343","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc14c31eda0dd40bf3ea881f4170106df757e6636c79c0c770727c38f55a8343"} {"level":"debug","ts":"2026-07-06T18:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc14c31eda0dd40bf3ea881f4170106df757e6636c79c0c770727c38f55a8343","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc14c31eda0dd40bf3ea881f4170106df757e6636c79c0c770727c38f55a8343"} {"level":"debug","ts":"2026-07-06T18:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc14c31eda0dd40bf3ea881f4170106df757e6636c79c0c770727c38f55a8343","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc14c31eda0dd40bf3ea881f4170106df757e6636c79c0c770727c38f55a8343"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc14c31eda0dd40bf3ea881f4170106df757e6636c79c0c770727c38f55a8343","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc14c31eda0dd40bf3ea881f4170106df757e6636c79c0c770727c38f55a8343","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc14c31eda0dd40bf3ea881f4170106df757e6636c79c0c770727c38f55a8343"} {"level":"debug","ts":"2026-07-06T18:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6"} {"level":"debug","ts":"2026-07-06T18:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6"} {"level":"debug","ts":"2026-07-06T18:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6"} {"level":"debug","ts":"2026-07-06T18:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6"} {"level":"debug","ts":"2026-07-06T18:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6"} {"level":"debug","ts":"2026-07-06T18:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6"} {"level":"debug","ts":"2026-07-06T18:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6"} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93"} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93"} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93"} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93"} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93"} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93"} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd87c564f4c990da1cc48491871f0f1a5bee90041a86ddebed0a082b9b8ed783","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd87c564f4c990da1cc48491871f0f1a5bee90041a86ddebed0a082b9b8ed783","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93"} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd87c564f4c990da1cc48491871f0f1a5bee90041a86ddebed0a082b9b8ed783","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd87c564f4c990da1cc48491871f0f1a5bee90041a86ddebed0a082b9b8ed783","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd87c564f4c990da1cc48491871f0f1a5bee90041a86ddebed0a082b9b8ed783"} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd87c564f4c990da1cc48491871f0f1a5bee90041a86ddebed0a082b9b8ed783","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd87c564f4c990da1cc48491871f0f1a5bee90041a86ddebed0a082b9b8ed783"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd87c564f4c990da1cc48491871f0f1a5bee90041a86ddebed0a082b9b8ed783","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93"} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd87c564f4c990da1cc48491871f0f1a5bee90041a86ddebed0a082b9b8ed783","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd87c564f4c990da1cc48491871f0f1a5bee90041a86ddebed0a082b9b8ed783"} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd87c564f4c990da1cc48491871f0f1a5bee90041a86ddebed0a082b9b8ed783","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd87c564f4c990da1cc48491871f0f1a5bee90041a86ddebed0a082b9b8ed783","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd87c564f4c990da1cc48491871f0f1a5bee90041a86ddebed0a082b9b8ed783"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd87c564f4c990da1cc48491871f0f1a5bee90041a86ddebed0a082b9b8ed783","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd87c564f4c990da1cc48491871f0f1a5bee90041a86ddebed0a082b9b8ed783","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd87c564f4c990da1cc48491871f0f1a5bee90041a86ddebed0a082b9b8ed783"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bd87c564f4c990da1cc48491871f0f1a5bee90041a86ddebed0a082b9b8ed783","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bd87c564f4c990da1cc48491871f0f1a5bee90041a86ddebed0a082b9b8ed783\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd87c564f4c990da1cc48491871f0f1a5bee90041a86ddebed0a082b9b8ed783","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e36ed1f0816357be09afea67322fc74de5715ad4205dc967c45ba299ed10794c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93"} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e36ed1f0816357be09afea67322fc74de5715ad4205dc967c45ba299ed10794c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd87c564f4c990da1cc48491871f0f1a5bee90041a86ddebed0a082b9b8ed783","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd87c564f4c990da1cc48491871f0f1a5bee90041a86ddebed0a082b9b8ed783"} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd87c564f4c990da1cc48491871f0f1a5bee90041a86ddebed0a082b9b8ed783","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e36ed1f0816357be09afea67322fc74de5715ad4205dc967c45ba299ed10794c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e36ed1f0816357be09afea67322fc74de5715ad4205dc967c45ba299ed10794c"} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e36ed1f0816357be09afea67322fc74de5715ad4205dc967c45ba299ed10794c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd87c564f4c990da1cc48491871f0f1a5bee90041a86ddebed0a082b9b8ed783","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e36ed1f0816357be09afea67322fc74de5715ad4205dc967c45ba299ed10794c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e36ed1f0816357be09afea67322fc74de5715ad4205dc967c45ba299ed10794c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e36ed1f0816357be09afea67322fc74de5715ad4205dc967c45ba299ed10794c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd87c564f4c990da1cc48491871f0f1a5bee90041a86ddebed0a082b9b8ed783","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e36ed1f0816357be09afea67322fc74de5715ad4205dc967c45ba299ed10794c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e36ed1f0816357be09afea67322fc74de5715ad4205dc967c45ba299ed10794c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd87c564f4c990da1cc48491871f0f1a5bee90041a86ddebed0a082b9b8ed783"} {"level":"error","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e36ed1f0816357be09afea67322fc74de5715ad4205dc967c45ba299ed10794c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e36ed1f0816357be09afea67322fc74de5715ad4205dc967c45ba299ed10794c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e36ed1f0816357be09afea67322fc74de5715ad4205dc967c45ba299ed10794c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e36ed1f0816357be09afea67322fc74de5715ad4205dc967c45ba299ed10794c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bd87c564f4c990da1cc48491871f0f1a5bee90041a86ddebed0a082b9b8ed783","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bd87c564f4c990da1cc48491871f0f1a5bee90041a86ddebed0a082b9b8ed783"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93"} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bd87c564f4c990da1cc48491871f0f1a5bee90041a86ddebed0a082b9b8ed783","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd87c564f4c990da1cc48491871f0f1a5bee90041a86ddebed0a082b9b8ed783","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e36ed1f0816357be09afea67322fc74de5715ad4205dc967c45ba299ed10794c"} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd87c564f4c990da1cc48491871f0f1a5bee90041a86ddebed0a082b9b8ed783"} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b503ecb09e6c7356bdc9b6288fb99ea62ee97e2c7df6ec1eaff33dcaf86472b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b503ecb09e6c7356bdc9b6288fb99ea62ee97e2c7df6ec1eaff33dcaf86472b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b503ecb09e6c7356bdc9b6288fb99ea62ee97e2c7df6ec1eaff33dcaf86472b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b503ecb09e6c7356bdc9b6288fb99ea62ee97e2c7df6ec1eaff33dcaf86472b"} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b503ecb09e6c7356bdc9b6288fb99ea62ee97e2c7df6ec1eaff33dcaf86472b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b503ecb09e6c7356bdc9b6288fb99ea62ee97e2c7df6ec1eaff33dcaf86472b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1b503ecb09e6c7356bdc9b6288fb99ea62ee97e2c7df6ec1eaff33dcaf86472b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1b503ecb09e6c7356bdc9b6288fb99ea62ee97e2c7df6ec1eaff33dcaf86472b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b503ecb09e6c7356bdc9b6288fb99ea62ee97e2c7df6ec1eaff33dcaf86472b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b503ecb09e6c7356bdc9b6288fb99ea62ee97e2c7df6ec1eaff33dcaf86472b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b503ecb09e6c7356bdc9b6288fb99ea62ee97e2c7df6ec1eaff33dcaf86472b"} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b503ecb09e6c7356bdc9b6288fb99ea62ee97e2c7df6ec1eaff33dcaf86472b"} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19f2c920242c77cad3e70a7b8ca9ec7bea7087d8b16ab5877711a56600232dfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19f2c920242c77cad3e70a7b8ca9ec7bea7087d8b16ab5877711a56600232dfc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19f2c920242c77cad3e70a7b8ca9ec7bea7087d8b16ab5877711a56600232dfc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b503ecb09e6c7356bdc9b6288fb99ea62ee97e2c7df6ec1eaff33dcaf86472b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b503ecb09e6c7356bdc9b6288fb99ea62ee97e2c7df6ec1eaff33dcaf86472b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19f2c920242c77cad3e70a7b8ca9ec7bea7087d8b16ab5877711a56600232dfc"} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b503ecb09e6c7356bdc9b6288fb99ea62ee97e2c7df6ec1eaff33dcaf86472b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19f2c920242c77cad3e70a7b8ca9ec7bea7087d8b16ab5877711a56600232dfc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b503ecb09e6c7356bdc9b6288fb99ea62ee97e2c7df6ec1eaff33dcaf86472b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19f2c920242c77cad3e70a7b8ca9ec7bea7087d8b16ab5877711a56600232dfc"} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19f2c920242c77cad3e70a7b8ca9ec7bea7087d8b16ab5877711a56600232dfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19f2c920242c77cad3e70a7b8ca9ec7bea7087d8b16ab5877711a56600232dfc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b503ecb09e6c7356bdc9b6288fb99ea62ee97e2c7df6ec1eaff33dcaf86472b"} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19f2c920242c77cad3e70a7b8ca9ec7bea7087d8b16ab5877711a56600232dfc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19f2c920242c77cad3e70a7b8ca9ec7bea7087d8b16ab5877711a56600232dfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19f2c920242c77cad3e70a7b8ca9ec7bea7087d8b16ab5877711a56600232dfc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19f2c920242c77cad3e70a7b8ca9ec7bea7087d8b16ab5877711a56600232dfc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19f2c920242c77cad3e70a7b8ca9ec7bea7087d8b16ab5877711a56600232dfc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19f2c920242c77cad3e70a7b8ca9ec7bea7087d8b16ab5877711a56600232dfc"} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76f1a7adc58bd3b4491ad9e9773eecf834498af64ece4a510ed07db70711fa3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76f1a7adc58bd3b4491ad9e9773eecf834498af64ece4a510ed07db70711fa3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19f2c920242c77cad3e70a7b8ca9ec7bea7087d8b16ab5877711a56600232dfc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76f1a7adc58bd3b4491ad9e9773eecf834498af64ece4a510ed07db70711fa3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76f1a7adc58bd3b4491ad9e9773eecf834498af64ece4a510ed07db70711fa3d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19f2c920242c77cad3e70a7b8ca9ec7bea7087d8b16ab5877711a56600232dfc"} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76f1a7adc58bd3b4491ad9e9773eecf834498af64ece4a510ed07db70711fa3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76f1a7adc58bd3b4491ad9e9773eecf834498af64ece4a510ed07db70711fa3d"} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76f1a7adc58bd3b4491ad9e9773eecf834498af64ece4a510ed07db70711fa3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19f2c920242c77cad3e70a7b8ca9ec7bea7087d8b16ab5877711a56600232dfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19f2c920242c77cad3e70a7b8ca9ec7bea7087d8b16ab5877711a56600232dfc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19f2c920242c77cad3e70a7b8ca9ec7bea7087d8b16ab5877711a56600232dfc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76f1a7adc58bd3b4491ad9e9773eecf834498af64ece4a510ed07db70711fa3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19f2c920242c77cad3e70a7b8ca9ec7bea7087d8b16ab5877711a56600232dfc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76f1a7adc58bd3b4491ad9e9773eecf834498af64ece4a510ed07db70711fa3d"} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"76f1a7adc58bd3b4491ad9e9773eecf834498af64ece4a510ed07db70711fa3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["76f1a7adc58bd3b4491ad9e9773eecf834498af64ece4a510ed07db70711fa3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19f2c920242c77cad3e70a7b8ca9ec7bea7087d8b16ab5877711a56600232dfc"} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"76f1a7adc58bd3b4491ad9e9773eecf834498af64ece4a510ed07db70711fa3d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76f1a7adc58bd3b4491ad9e9773eecf834498af64ece4a510ed07db70711fa3d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76f1a7adc58bd3b4491ad9e9773eecf834498af64ece4a510ed07db70711fa3d"} {"level":"debug","ts":"2026-07-06T18:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d"} {"level":"debug","ts":"2026-07-06T18:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d"} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d"} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d"} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bd87c564f4c990da1cc48491871f0f1a5bee90041a86ddebed0a082b9b8ed783","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d"} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bd87c564f4c990da1cc48491871f0f1a5bee90041a86ddebed0a082b9b8ed783"} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d"} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d"} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d"} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d"} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d"} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d"} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d"} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d"} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d"} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d"} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d"} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d"} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d"} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"183d761bee4541a0ceb7f6b659e0f7df3ee5b852d216b17f8f1015e192edc529","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/183d761bee4541a0ceb7f6b659e0f7df3ee5b852d216b17f8f1015e192edc529"} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"183d761bee4541a0ceb7f6b659e0f7df3ee5b852d216b17f8f1015e192edc529","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"183d761bee4541a0ceb7f6b659e0f7df3ee5b852d216b17f8f1015e192edc529","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["183d761bee4541a0ceb7f6b659e0f7df3ee5b852d216b17f8f1015e192edc529"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d"} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"183d761bee4541a0ceb7f6b659e0f7df3ee5b852d216b17f8f1015e192edc529","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/183d761bee4541a0ceb7f6b659e0f7df3ee5b852d216b17f8f1015e192edc529"} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"183d761bee4541a0ceb7f6b659e0f7df3ee5b852d216b17f8f1015e192edc529","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d"} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc14c31eda0dd40bf3ea881f4170106df757e6636c79c0c770727c38f55a8343","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/183d761bee4541a0ceb7f6b659e0f7df3ee5b852d216b17f8f1015e192edc529"} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fb539fccfa77279580de490c14160e472a149cc12231a1af5e51639957d72d05","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d"} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc14c31eda0dd40bf3ea881f4170106df757e6636c79c0c770727c38f55a8343"} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fb539fccfa77279580de490c14160e472a149cc12231a1af5e51639957d72d05"} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6"} {"level":"debug","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6"} {"level":"debug","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6"} {"level":"debug","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee"} {"level":"info","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6"} {"level":"info","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6"} {"level":"info","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6"} {"level":"debug","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93"} {"level":"info","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6"} {"level":"debug","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc932d6b35dda28719f6617a0f1673df854d3ae01a06618be296e8932a8c943a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6"} {"level":"debug","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc932d6b35dda28719f6617a0f1673df854d3ae01a06618be296e8932a8c943a"} {"level":"info","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6"} {"level":"debug","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1657fe718bc2ecaea94d8322cbdab8cb3cc6fa8da4cd425bf3fbc9d2988eff0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d"} {"level":"debug","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1657fe718bc2ecaea94d8322cbdab8cb3cc6fa8da4cd425bf3fbc9d2988eff0"} {"level":"info","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T18:31:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T18:31:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d"} {"level":"info","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d"} {"level":"debug","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eba3f69bd68bdf24a23af98bb9d9f26748b7e5bb05df259ffb6d2bf2262ba43b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d"} {"level":"debug","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"76f1a7adc58bd3b4491ad9e9773eecf834498af64ece4a510ed07db70711fa3d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eba3f69bd68bdf24a23af98bb9d9f26748b7e5bb05df259ffb6d2bf2262ba43b"} {"level":"debug","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b503ecb09e6c7356bdc9b6288fb99ea62ee97e2c7df6ec1eaff33dcaf86472b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T18:31:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T18:31:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/76f1a7adc58bd3b4491ad9e9773eecf834498af64ece4a510ed07db70711fa3d"} {"level":"info","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19f2c920242c77cad3e70a7b8ca9ec7bea7087d8b16ab5877711a56600232dfc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b503ecb09e6c7356bdc9b6288fb99ea62ee97e2c7df6ec1eaff33dcaf86472b"} {"level":"info","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19f2c920242c77cad3e70a7b8ca9ec7bea7087d8b16ab5877711a56600232dfc"} {"level":"debug","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53df67608d5abc43924c768cf7345306aa2627316105abec286ccd36d20a9da4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0166686bf4362045ed04a3aab2b50e6c4fa64f22ab130da1941e2525dcea833c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d"} {"level":"debug","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80cf73e6f8f2a5225618d1bca299213556e83feff14028f195cc7c252b0f82c8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53df67608d5abc43924c768cf7345306aa2627316105abec286ccd36d20a9da4"} {"level":"debug","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e36ed1f0816357be09afea67322fc74de5715ad4205dc967c45ba299ed10794c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0166686bf4362045ed04a3aab2b50e6c4fa64f22ab130da1941e2525dcea833c"} {"level":"debug","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c7e80f80e15550298694580d5b295cb9c5f7f3a3a56075350094dd2d2b764acc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80cf73e6f8f2a5225618d1bca299213556e83feff14028f195cc7c252b0f82c8"} {"level":"info","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e36ed1f0816357be09afea67322fc74de5715ad4205dc967c45ba299ed10794c"} {"level":"info","ts":"2026-07-06T18:31:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c7e80f80e15550298694580d5b295cb9c5f7f3a3a56075350094dd2d2b764acc"} {"level":"info","ts":"2026-07-06T18:32:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df21d3d2-32b4-4512-b5b4-c600d60c81a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56188","PortSpecifier":{"PortValue":56188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"df21d3d2-32b4-4512-b5b4-c600d60c81a2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:32:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"df21d3d2-32b4-4512-b5b4-c600d60c81a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56188","PortSpecifier":{"PortValue":56188}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362721,"nanos":196696661},"http":{"id":"df21d3d2-32b4-4512-b5b4-c600d60c81a2","method":"POST","headers":{":authority":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:32:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"df21d3d2-32b4-4512-b5b4-c600d60c81a2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:32:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"df21d3d2-32b4-4512-b5b4-c600d60c81a2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"]}} {"level":"debug","ts":"2026-07-06T18:32:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"df21d3d2-32b4-4512-b5b4-c600d60c81a2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:32:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df21d3d2-32b4-4512-b5b4-c600d60c81a2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:32:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df21d3d2-32b4-4512-b5b4-c600d60c81a2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:32:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"df21d3d2-32b4-4512-b5b4-c600d60c81a2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9c9be0/rate-test-model-9c9be0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:32:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"df21d3d2-32b4-4512-b5b4-c600d60c81a2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:32:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df21d3d2-32b4-4512-b5b4-c600d60c81a2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:32:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"df21d3d2-32b4-4512-b5b4-c600d60c81a2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-06T18:32:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df21d3d2-32b4-4512-b5b4-c600d60c81a2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:32:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"df21d3d2-32b4-4512-b5b4-c600d60c81a2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:32:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ec8ec2e-8b69-4fba-a1b0-bc7a5ad8e3b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:42286","PortSpecifier":{"PortValue":42286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3ec8ec2e-8b69-4fba-a1b0-bc7a5ad8e3b6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:32:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ec8ec2e-8b69-4fba-a1b0-bc7a5ad8e3b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:42286","PortSpecifier":{"PortValue":42286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362721,"nanos":238578802},"http":{"id":"3ec8ec2e-8b69-4fba-a1b0-bc7a5ad8e3b6","method":"POST","headers":{":authority":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:32:01Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3ec8ec2e-8b69-4fba-a1b0-bc7a5ad8e3b6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:32:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3ec8ec2e-8b69-4fba-a1b0-bc7a5ad8e3b6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"]}} {"level":"debug","ts":"2026-07-06T18:32:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3ec8ec2e-8b69-4fba-a1b0-bc7a5ad8e3b6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:32:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ec8ec2e-8b69-4fba-a1b0-bc7a5ad8e3b6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:32:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ec8ec2e-8b69-4fba-a1b0-bc7a5ad8e3b6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:32:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ec8ec2e-8b69-4fba-a1b0-bc7a5ad8e3b6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b6a5ee/rate-test-model-b6a5ee\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:32:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3ec8ec2e-8b69-4fba-a1b0-bc7a5ad8e3b6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:32:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ec8ec2e-8b69-4fba-a1b0-bc7a5ad8e3b6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:32:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ec8ec2e-8b69-4fba-a1b0-bc7a5ad8e3b6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T18:32:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ec8ec2e-8b69-4fba-a1b0-bc7a5ad8e3b6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:32:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ec8ec2e-8b69-4fba-a1b0-bc7a5ad8e3b6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:32:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04f175af-b8f8-42f0-a1ad-2fdd3fa86e64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56198","PortSpecifier":{"PortValue":56198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"04f175af-b8f8-42f0-a1ad-2fdd3fa86e64","method":"POST","path":"/ai-tenant-e2e-shared-a-9c9be0/rate-test-model-9c9be0/v1/completions","host":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:32:01Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"04f175af-b8f8-42f0-a1ad-2fdd3fa86e64","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56198","PortSpecifier":{"PortValue":56198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362721,"nanos":280220700},"http":{"id":"04f175af-b8f8-42f0-a1ad-2fdd3fa86e64","method":"POST","headers":{":authority":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9c9be0/rate-test-model-9c9be0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:32:01Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"04f175af-b8f8-42f0-a1ad-2fdd3fa86e64","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KlqvgVnPWEmNKRaE_OzlmSKQnDoWL3JYA1jsOKYyuQgYjsY1d18Udl2B1dhQ"} {"level":"debug","ts":"2026-07-06T18:32:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"04f175af-b8f8-42f0-a1ad-2fdd3fa86e64","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9c9be0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KlqvgVnPWEmNKRaE_OzlmSKQnDoWL3JYA1jsOKYyuQgYjsY1d18Udl2B1dhQ\"}"} {"level":"debug","ts":"2026-07-06T18:32:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"04f175af-b8f8-42f0-a1ad-2fdd3fa86e64","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9c9be0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"36106791-d9b7-4f45-a8f7-8ef01a7183b7","keyName":"e2e-rate-a-4bc30c","subscription":"e2e-rate-iso-a-4bc30c","tenant":"e2e-shared-a-9c9be0","userId":"36106791-d9b7-4f45-a8f7-8ef01a7183b7","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T18:32:01Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"04f175af-b8f8-42f0-a1ad-2fdd3fa86e64","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9c9be0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9c9be0/rate-test-model-9c9be0\",\"requestedSubscription\":\"e2e-rate-iso-a-4bc30c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T18:32:01Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"04f175af-b8f8-42f0-a1ad-2fdd3fa86e64","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9c9be0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9c9be0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4bc30c","namespace":"ai-tenant-e2e-shared-a-9c9be0","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T18:32:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"04f175af-b8f8-42f0-a1ad-2fdd3fa86e64","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:32:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04f175af-b8f8-42f0-a1ad-2fdd3fa86e64","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:32:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04f175af-b8f8-42f0-a1ad-2fdd3fa86e64","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:32:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04f175af-b8f8-42f0-a1ad-2fdd3fa86e64","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9c9be0/rate-test-model-9c9be0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:32:01Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"04f175af-b8f8-42f0-a1ad-2fdd3fa86e64","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:32:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04f175af-b8f8-42f0-a1ad-2fdd3fa86e64","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:32:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04f175af-b8f8-42f0-a1ad-2fdd3fa86e64","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4bc30c"} {"level":"debug","ts":"2026-07-06T18:32:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04f175af-b8f8-42f0-a1ad-2fdd3fa86e64","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:32:01Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"04f175af-b8f8-42f0-a1ad-2fdd3fa86e64","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"36106791-d9b7-4f45-a8f7-8ef01a7183b7","keyName":"e2e-rate-a-4bc30c","selected_subscription":"e2e-rate-iso-a-4bc30c","selected_subscription_key":"ai-tenant-e2e-shared-a-9c9be0/e2e-rate-iso-a-4bc30c@ai-tenant-e2e-shared-a-9c9be0/rate-test-model-9c9be0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9c9be0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4bc30c","namespace":"ai-tenant-e2e-shared-a-9c9be0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T18:32:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04f175af-b8f8-42f0-a1ad-2fdd3fa86e64","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:32:01Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"04f175af-b8f8-42f0-a1ad-2fdd3fa86e64","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:32:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a4cf95e-edf8-404e-b86a-f314c68843d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56210","PortSpecifier":{"PortValue":56210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7a4cf95e-edf8-404e-b86a-f314c68843d4","method":"POST","path":"/ai-tenant-e2e-shared-a-9c9be0/rate-test-model-9c9be0/v1/completions","host":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:32:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7a4cf95e-edf8-404e-b86a-f314c68843d4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56210","PortSpecifier":{"PortValue":56210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362722,"nanos":346443828},"http":{"id":"7a4cf95e-edf8-404e-b86a-f314c68843d4","method":"POST","headers":{":authority":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9c9be0/rate-test-model-9c9be0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:32:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7a4cf95e-edf8-404e-b86a-f314c68843d4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KlqvgVnPWEmNKRaE_OzlmSKQnDoWL3JYA1jsOKYyuQgYjsY1d18Udl2B1dhQ"} {"level":"debug","ts":"2026-07-06T18:32:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7a4cf95e-edf8-404e-b86a-f314c68843d4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9c9be0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KlqvgVnPWEmNKRaE_OzlmSKQnDoWL3JYA1jsOKYyuQgYjsY1d18Udl2B1dhQ\"}"} {"level":"debug","ts":"2026-07-06T18:32:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7a4cf95e-edf8-404e-b86a-f314c68843d4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9c9be0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"36106791-d9b7-4f45-a8f7-8ef01a7183b7","keyName":"e2e-rate-a-4bc30c","subscription":"e2e-rate-iso-a-4bc30c","tenant":"e2e-shared-a-9c9be0","userId":"36106791-d9b7-4f45-a8f7-8ef01a7183b7","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T18:32:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7a4cf95e-edf8-404e-b86a-f314c68843d4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9c9be0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9c9be0/rate-test-model-9c9be0\",\"requestedSubscription\":\"e2e-rate-iso-a-4bc30c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T18:32:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7a4cf95e-edf8-404e-b86a-f314c68843d4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9c9be0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9c9be0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4bc30c","namespace":"ai-tenant-e2e-shared-a-9c9be0","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T18:32:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7a4cf95e-edf8-404e-b86a-f314c68843d4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:32:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a4cf95e-edf8-404e-b86a-f314c68843d4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:32:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a4cf95e-edf8-404e-b86a-f314c68843d4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:32:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a4cf95e-edf8-404e-b86a-f314c68843d4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:32:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7a4cf95e-edf8-404e-b86a-f314c68843d4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9c9be0/rate-test-model-9c9be0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:32:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a4cf95e-edf8-404e-b86a-f314c68843d4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:32:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a4cf95e-edf8-404e-b86a-f314c68843d4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4bc30c"} {"level":"debug","ts":"2026-07-06T18:32:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a4cf95e-edf8-404e-b86a-f314c68843d4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:32:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7a4cf95e-edf8-404e-b86a-f314c68843d4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"36106791-d9b7-4f45-a8f7-8ef01a7183b7","keyName":"e2e-rate-a-4bc30c","selected_subscription":"e2e-rate-iso-a-4bc30c","selected_subscription_key":"ai-tenant-e2e-shared-a-9c9be0/e2e-rate-iso-a-4bc30c@ai-tenant-e2e-shared-a-9c9be0/rate-test-model-9c9be0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9c9be0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4bc30c","namespace":"ai-tenant-e2e-shared-a-9c9be0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T18:32:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a4cf95e-edf8-404e-b86a-f314c68843d4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:32:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7a4cf95e-edf8-404e-b86a-f314c68843d4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:32:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"421aad1f-8ada-4bef-a64f-290dcedd02a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56220","PortSpecifier":{"PortValue":56220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"421aad1f-8ada-4bef-a64f-290dcedd02a5","method":"POST","path":"/ai-tenant-e2e-shared-a-9c9be0/rate-test-model-9c9be0/v1/completions","host":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:32:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"421aad1f-8ada-4bef-a64f-290dcedd02a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:56220","PortSpecifier":{"PortValue":56220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362723,"nanos":385972787},"http":{"id":"421aad1f-8ada-4bef-a64f-290dcedd02a5","method":"POST","headers":{":authority":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9c9be0/rate-test-model-9c9be0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:32:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"421aad1f-8ada-4bef-a64f-290dcedd02a5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-KlqvgVnPWEmNKRaE_OzlmSKQnDoWL3JYA1jsOKYyuQgYjsY1d18Udl2B1dhQ"} {"level":"debug","ts":"2026-07-06T18:32:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"421aad1f-8ada-4bef-a64f-290dcedd02a5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9c9be0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-KlqvgVnPWEmNKRaE_OzlmSKQnDoWL3JYA1jsOKYyuQgYjsY1d18Udl2B1dhQ\"}"} {"level":"debug","ts":"2026-07-06T18:32:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"421aad1f-8ada-4bef-a64f-290dcedd02a5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9c9be0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"36106791-d9b7-4f45-a8f7-8ef01a7183b7","keyName":"e2e-rate-a-4bc30c","subscription":"e2e-rate-iso-a-4bc30c","tenant":"e2e-shared-a-9c9be0","userId":"36106791-d9b7-4f45-a8f7-8ef01a7183b7","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T18:32:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"421aad1f-8ada-4bef-a64f-290dcedd02a5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9c9be0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9c9be0/rate-test-model-9c9be0\",\"requestedSubscription\":\"e2e-rate-iso-a-4bc30c\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T18:32:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"421aad1f-8ada-4bef-a64f-290dcedd02a5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9c9be0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9c9be0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4bc30c","namespace":"ai-tenant-e2e-shared-a-9c9be0","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T18:32:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"421aad1f-8ada-4bef-a64f-290dcedd02a5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:32:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"421aad1f-8ada-4bef-a64f-290dcedd02a5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:32:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"421aad1f-8ada-4bef-a64f-290dcedd02a5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:32:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"421aad1f-8ada-4bef-a64f-290dcedd02a5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:32:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"421aad1f-8ada-4bef-a64f-290dcedd02a5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9c9be0/rate-test-model-9c9be0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:32:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"421aad1f-8ada-4bef-a64f-290dcedd02a5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:32:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"421aad1f-8ada-4bef-a64f-290dcedd02a5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-4bc30c"} {"level":"debug","ts":"2026-07-06T18:32:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"421aad1f-8ada-4bef-a64f-290dcedd02a5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:32:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"421aad1f-8ada-4bef-a64f-290dcedd02a5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"36106791-d9b7-4f45-a8f7-8ef01a7183b7","keyName":"e2e-rate-a-4bc30c","selected_subscription":"e2e-rate-iso-a-4bc30c","selected_subscription_key":"ai-tenant-e2e-shared-a-9c9be0/e2e-rate-iso-a-4bc30c@ai-tenant-e2e-shared-a-9c9be0/rate-test-model-9c9be0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9c9be0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-4bc30c","namespace":"ai-tenant-e2e-shared-a-9c9be0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T18:32:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"421aad1f-8ada-4bef-a64f-290dcedd02a5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:32:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"421aad1f-8ada-4bef-a64f-290dcedd02a5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:32:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85d9dc8d-05a2-4483-91a8-a69999639e11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44542","PortSpecifier":{"PortValue":44542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"85d9dc8d-05a2-4483-91a8-a69999639e11","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:32:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"85d9dc8d-05a2-4483-91a8-a69999639e11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44542","PortSpecifier":{"PortValue":44542}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362734,"nanos":190510000},"http":{"id":"85d9dc8d-05a2-4483-91a8-a69999639e11","method":"POST","headers":{":authority":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:32:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"85d9dc8d-05a2-4483-91a8-a69999639e11","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:32:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"85d9dc8d-05a2-4483-91a8-a69999639e11","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"]}} {"level":"debug","ts":"2026-07-06T18:32:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"85d9dc8d-05a2-4483-91a8-a69999639e11","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.53:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:32:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85d9dc8d-05a2-4483-91a8-a69999639e11","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:32:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85d9dc8d-05a2-4483-91a8-a69999639e11","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:32:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"85d9dc8d-05a2-4483-91a8-a69999639e11","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9c9be0/rate-test-model-9c9be0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:32:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"85d9dc8d-05a2-4483-91a8-a69999639e11","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:32:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85d9dc8d-05a2-4483-91a8-a69999639e11","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:32:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"85d9dc8d-05a2-4483-91a8-a69999639e11","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T18:32:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85d9dc8d-05a2-4483-91a8-a69999639e11","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:32:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"85d9dc8d-05a2-4483-91a8-a69999639e11","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:32:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7335d389-8db5-4120-b962-9f996662e75e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53220","PortSpecifier":{"PortValue":53220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7335d389-8db5-4120-b962-9f996662e75e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:32:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7335d389-8db5-4120-b962-9f996662e75e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53220","PortSpecifier":{"PortValue":53220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362734,"nanos":251375316},"http":{"id":"7335d389-8db5-4120-b962-9f996662e75e","method":"POST","headers":{":authority":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:32:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7335d389-8db5-4120-b962-9f996662e75e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-06T18:32:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7335d389-8db5-4120-b962-9f996662e75e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"]}} {"level":"debug","ts":"2026-07-06T18:32:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7335d389-8db5-4120-b962-9f996662e75e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/600e71389925"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d20ff203-42b5-4768-acaf-2fb779119a10"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2d2fa48e-8976-463c-a7db-c2bc0ea465bb","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:32:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7335d389-8db5-4120-b962-9f996662e75e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:32:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7335d389-8db5-4120-b962-9f996662e75e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b6a5ee/rate-test-model-b6a5ee\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:32:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7335d389-8db5-4120-b962-9f996662e75e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:32:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7335d389-8db5-4120-b962-9f996662e75e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-06T18:32:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7335d389-8db5-4120-b962-9f996662e75e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:32:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7335d389-8db5-4120-b962-9f996662e75e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-06T18:32:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7335d389-8db5-4120-b962-9f996662e75e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:32:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7335d389-8db5-4120-b962-9f996662e75e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:32:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"144a9455-4435-48de-b648-2ce3dd19921b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44554","PortSpecifier":{"PortValue":44554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"144a9455-4435-48de-b648-2ce3dd19921b","method":"POST","path":"/ai-tenant-e2e-shared-a-9c9be0/rate-test-model-9c9be0/v1/completions","host":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:32:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"144a9455-4435-48de-b648-2ce3dd19921b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44554","PortSpecifier":{"PortValue":44554}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362734,"nanos":284775411},"http":{"id":"144a9455-4435-48de-b648-2ce3dd19921b","method":"POST","headers":{":authority":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9c9be0/rate-test-model-9c9be0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:32:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"144a9455-4435-48de-b648-2ce3dd19921b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3BVGV9157cl35CSR_a7TiysXGOPMFH07ohFjh5kqOMjyx2Cl1KlXa9hTt5AV"} {"level":"debug","ts":"2026-07-06T18:32:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"144a9455-4435-48de-b648-2ce3dd19921b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9c9be0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3BVGV9157cl35CSR_a7TiysXGOPMFH07ohFjh5kqOMjyx2Cl1KlXa9hTt5AV\"}"} {"level":"debug","ts":"2026-07-06T18:32:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"144a9455-4435-48de-b648-2ce3dd19921b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9c9be0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"15a972f6-97c4-4519-9cbb-59a865f6d1f0","keyName":"e2e-rate-a-e19564","subscription":"e2e-rate-iso-a-e19564","tenant":"e2e-shared-a-9c9be0","userId":"15a972f6-97c4-4519-9cbb-59a865f6d1f0","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T18:32:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"144a9455-4435-48de-b648-2ce3dd19921b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9c9be0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9c9be0/rate-test-model-9c9be0\",\"requestedSubscription\":\"e2e-rate-iso-a-e19564\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T18:32:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"144a9455-4435-48de-b648-2ce3dd19921b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9c9be0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9c9be0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e19564","namespace":"ai-tenant-e2e-shared-a-9c9be0","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T18:32:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"144a9455-4435-48de-b648-2ce3dd19921b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:32:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"144a9455-4435-48de-b648-2ce3dd19921b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:32:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"144a9455-4435-48de-b648-2ce3dd19921b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:32:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"144a9455-4435-48de-b648-2ce3dd19921b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9c9be0/rate-test-model-9c9be0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:32:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"144a9455-4435-48de-b648-2ce3dd19921b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:32:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"144a9455-4435-48de-b648-2ce3dd19921b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:32:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"144a9455-4435-48de-b648-2ce3dd19921b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e19564"} {"level":"debug","ts":"2026-07-06T18:32:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"144a9455-4435-48de-b648-2ce3dd19921b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:32:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"144a9455-4435-48de-b648-2ce3dd19921b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"15a972f6-97c4-4519-9cbb-59a865f6d1f0","keyName":"e2e-rate-a-e19564","selected_subscription":"e2e-rate-iso-a-e19564","selected_subscription_key":"ai-tenant-e2e-shared-a-9c9be0/e2e-rate-iso-a-e19564@ai-tenant-e2e-shared-a-9c9be0/rate-test-model-9c9be0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9c9be0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e19564","namespace":"ai-tenant-e2e-shared-a-9c9be0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T18:32:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"144a9455-4435-48de-b648-2ce3dd19921b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:32:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"144a9455-4435-48de-b648-2ce3dd19921b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:32:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed7623cd-d435-41c2-bb51-2cf2a2a81cc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44558","PortSpecifier":{"PortValue":44558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ed7623cd-d435-41c2-bb51-2cf2a2a81cc4","method":"POST","path":"/ai-tenant-e2e-shared-a-9c9be0/rate-test-model-9c9be0/v1/completions","host":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:32:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed7623cd-d435-41c2-bb51-2cf2a2a81cc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44558","PortSpecifier":{"PortValue":44558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362735,"nanos":345734646},"http":{"id":"ed7623cd-d435-41c2-bb51-2cf2a2a81cc4","method":"POST","headers":{":authority":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9c9be0/rate-test-model-9c9be0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:32:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ed7623cd-d435-41c2-bb51-2cf2a2a81cc4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3BVGV9157cl35CSR_a7TiysXGOPMFH07ohFjh5kqOMjyx2Cl1KlXa9hTt5AV"} {"level":"debug","ts":"2026-07-06T18:32:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ed7623cd-d435-41c2-bb51-2cf2a2a81cc4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9c9be0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3BVGV9157cl35CSR_a7TiysXGOPMFH07ohFjh5kqOMjyx2Cl1KlXa9hTt5AV\"}"} {"level":"debug","ts":"2026-07-06T18:32:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ed7623cd-d435-41c2-bb51-2cf2a2a81cc4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9c9be0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"15a972f6-97c4-4519-9cbb-59a865f6d1f0","keyName":"e2e-rate-a-e19564","subscription":"e2e-rate-iso-a-e19564","tenant":"e2e-shared-a-9c9be0","userId":"15a972f6-97c4-4519-9cbb-59a865f6d1f0","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T18:32:15Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ed7623cd-d435-41c2-bb51-2cf2a2a81cc4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9c9be0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9c9be0/rate-test-model-9c9be0\",\"requestedSubscription\":\"e2e-rate-iso-a-e19564\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T18:32:15Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ed7623cd-d435-41c2-bb51-2cf2a2a81cc4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9c9be0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9c9be0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e19564","namespace":"ai-tenant-e2e-shared-a-9c9be0","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T18:32:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ed7623cd-d435-41c2-bb51-2cf2a2a81cc4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:32:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed7623cd-d435-41c2-bb51-2cf2a2a81cc4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:32:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed7623cd-d435-41c2-bb51-2cf2a2a81cc4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:32:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed7623cd-d435-41c2-bb51-2cf2a2a81cc4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9c9be0/rate-test-model-9c9be0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:32:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed7623cd-d435-41c2-bb51-2cf2a2a81cc4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:32:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed7623cd-d435-41c2-bb51-2cf2a2a81cc4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:32:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed7623cd-d435-41c2-bb51-2cf2a2a81cc4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:32:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed7623cd-d435-41c2-bb51-2cf2a2a81cc4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e19564"} {"level":"debug","ts":"2026-07-06T18:32:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed7623cd-d435-41c2-bb51-2cf2a2a81cc4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"15a972f6-97c4-4519-9cbb-59a865f6d1f0","keyName":"e2e-rate-a-e19564","selected_subscription":"e2e-rate-iso-a-e19564","selected_subscription_key":"ai-tenant-e2e-shared-a-9c9be0/e2e-rate-iso-a-e19564@ai-tenant-e2e-shared-a-9c9be0/rate-test-model-9c9be0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9c9be0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e19564","namespace":"ai-tenant-e2e-shared-a-9c9be0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T18:32:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed7623cd-d435-41c2-bb51-2cf2a2a81cc4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:32:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed7623cd-d435-41c2-bb51-2cf2a2a81cc4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:32:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba234bab-4ae5-4638-ba38-62c19accfe8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44564","PortSpecifier":{"PortValue":44564}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ba234bab-4ae5-4638-ba38-62c19accfe8c","method":"POST","path":"/ai-tenant-e2e-shared-a-9c9be0/rate-test-model-9c9be0/v1/completions","host":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:32:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ba234bab-4ae5-4638-ba38-62c19accfe8c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:44564","PortSpecifier":{"PortValue":44564}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.53:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362736,"nanos":384059060},"http":{"id":"ba234bab-4ae5-4638-ba38-62c19accfe8c","method":"POST","headers":{":authority":"e2e-shared-a-9c9be0.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-9c9be0/rate-test-model-9c9be0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:32:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ba234bab-4ae5-4638-ba38-62c19accfe8c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-3BVGV9157cl35CSR_a7TiysXGOPMFH07ohFjh5kqOMjyx2Cl1KlXa9hTt5AV"} {"level":"debug","ts":"2026-07-06T18:32:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ba234bab-4ae5-4638-ba38-62c19accfe8c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-9c9be0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-3BVGV9157cl35CSR_a7TiysXGOPMFH07ohFjh5kqOMjyx2Cl1KlXa9hTt5AV\"}"} {"level":"debug","ts":"2026-07-06T18:32:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ba234bab-4ae5-4638-ba38-62c19accfe8c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9c9be0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"15a972f6-97c4-4519-9cbb-59a865f6d1f0","keyName":"e2e-rate-a-e19564","subscription":"e2e-rate-iso-a-e19564","tenant":"e2e-shared-a-9c9be0","userId":"15a972f6-97c4-4519-9cbb-59a865f6d1f0","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T18:32:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ba234bab-4ae5-4638-ba38-62c19accfe8c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-9c9be0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-9c9be0/rate-test-model-9c9be0\",\"requestedSubscription\":\"e2e-rate-iso-a-e19564\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T18:32:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ba234bab-4ae5-4638-ba38-62c19accfe8c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-9c9be0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-9c9be0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e19564","namespace":"ai-tenant-e2e-shared-a-9c9be0","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T18:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ba234bab-4ae5-4638-ba38-62c19accfe8c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba234bab-4ae5-4638-ba38-62c19accfe8c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba234bab-4ae5-4638-ba38-62c19accfe8c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba234bab-4ae5-4638-ba38-62c19accfe8c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-9c9be0/rate-test-model-9c9be0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ba234bab-4ae5-4638-ba38-62c19accfe8c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:32:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba234bab-4ae5-4638-ba38-62c19accfe8c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:32:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba234bab-4ae5-4638-ba38-62c19accfe8c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:32:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba234bab-4ae5-4638-ba38-62c19accfe8c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e19564"} {"level":"debug","ts":"2026-07-06T18:32:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ba234bab-4ae5-4638-ba38-62c19accfe8c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"15a972f6-97c4-4519-9cbb-59a865f6d1f0","keyName":"e2e-rate-a-e19564","selected_subscription":"e2e-rate-iso-a-e19564","selected_subscription_key":"ai-tenant-e2e-shared-a-9c9be0/e2e-rate-iso-a-e19564@ai-tenant-e2e-shared-a-9c9be0/rate-test-model-9c9be0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-9c9be0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e19564","namespace":"ai-tenant-e2e-shared-a-9c9be0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T18:32:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba234bab-4ae5-4638-ba38-62c19accfe8c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:32:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ba234bab-4ae5-4638-ba38-62c19accfe8c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:32:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f773eab-264f-441a-af23-5eb0e0317e00","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53222","PortSpecifier":{"PortValue":53222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6f773eab-264f-441a-af23-5eb0e0317e00","method":"POST","path":"/ai-tenant-e2e-shared-b-b6a5ee/rate-test-model-b6a5ee/v1/completions","host":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-06T18:32:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f773eab-264f-441a-af23-5eb0e0317e00","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.9:53222","PortSpecifier":{"PortValue":53222}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783362736,"nanos":423759157},"http":{"id":"6f773eab-264f-441a-af23-5eb0e0317e00","method":"POST","headers":{":authority":"e2e-shared-b-b6a5ee.apps.9c6a9cab-efdb-44d8-98a3-600e71389925.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-b6a5ee/rate-test-model-b6a5ee/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:32:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6f773eab-264f-441a-af23-5eb0e0317e00","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-2DXvB7zzLG6rwc2P_EsLUjYxGTR1Czf1xXPKFMOac3CCbecqbHMQSx0hOMvW"} {"level":"debug","ts":"2026-07-06T18:32:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6f773eab-264f-441a-af23-5eb0e0317e00","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b6a5ee.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-2DXvB7zzLG6rwc2P_EsLUjYxGTR1Czf1xXPKFMOac3CCbecqbHMQSx0hOMvW\"}"} {"level":"debug","ts":"2026-07-06T18:32:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6f773eab-264f-441a-af23-5eb0e0317e00","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b6a5ee.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"b7e5950f-5a2e-40ac-88e0-24a4924d4af8","keyName":"e2e-rate-b-e19564","subscription":"e2e-rate-iso-b-e19564","tenant":"e2e-shared-b-b6a5ee","userId":"b7e5950f-5a2e-40ac-88e0-24a4924d4af8","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-06T18:32:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6f773eab-264f-441a-af23-5eb0e0317e00","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-b6a5ee.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-b6a5ee/rate-test-model-b6a5ee\",\"requestedSubscription\":\"e2e-rate-iso-b-e19564\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-06T18:32:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6f773eab-264f-441a-af23-5eb0e0317e00","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b6a5ee.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b6a5ee","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-e19564","namespace":"ai-tenant-e2e-shared-b-b6a5ee","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-06T18:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6f773eab-264f-441a-af23-5eb0e0317e00","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-06T18:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f773eab-264f-441a-af23-5eb0e0317e00","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f773eab-264f-441a-af23-5eb0e0317e00","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f773eab-264f-441a-af23-5eb0e0317e00","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b6a5ee/rate-test-model-b6a5ee\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:32:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f773eab-264f-441a-af23-5eb0e0317e00","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-06T18:32:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f773eab-264f-441a-af23-5eb0e0317e00","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-06T18:32:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f773eab-264f-441a-af23-5eb0e0317e00","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-e19564"} {"level":"debug","ts":"2026-07-06T18:32:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f773eab-264f-441a-af23-5eb0e0317e00","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-06T18:32:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f773eab-264f-441a-af23-5eb0e0317e00","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"b7e5950f-5a2e-40ac-88e0-24a4924d4af8","keyName":"e2e-rate-b-e19564","selected_subscription":"e2e-rate-iso-b-e19564","selected_subscription_key":"ai-tenant-e2e-shared-b-b6a5ee/e2e-rate-iso-b-e19564@ai-tenant-e2e-shared-b-b6a5ee/rate-test-model-b6a5ee","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b6a5ee","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-e19564","namespace":"ai-tenant-e2e-shared-b-b6a5ee","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-06T18:32:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f773eab-264f-441a-af23-5eb0e0317e00","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-06T18:32:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f773eab-264f-441a-af23-5eb0e0317e00","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-06T18:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27b81c0f1764e7283719cab22e828dd88e8c497da7bc8fafd44df8532496df93"} {"level":"info","ts":"2026-07-06T18:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fb539fccfa77279580de490c14160e472a149cc12231a1af5e51639957d72d05"} {"level":"info","ts":"2026-07-06T18:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc14c31eda0dd40bf3ea881f4170106df757e6636c79c0c770727c38f55a8343"} {"level":"info","ts":"2026-07-06T18:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e36ed1f0816357be09afea67322fc74de5715ad4205dc967c45ba299ed10794c"} {"level":"info","ts":"2026-07-06T18:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c7e80f80e15550298694580d5b295cb9c5f7f3a3a56075350094dd2d2b764acc"} {"level":"info","ts":"2026-07-06T18:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bd87c564f4c990da1cc48491871f0f1a5bee90041a86ddebed0a082b9b8ed783"} {"level":"info","ts":"2026-07-06T18:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/19f2c920242c77cad3e70a7b8ca9ec7bea7087d8b16ab5877711a56600232dfc"} {"level":"info","ts":"2026-07-06T18:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1657fe718bc2ecaea94d8322cbdab8cb3cc6fa8da4cd425bf3fbc9d2988eff0"} {"level":"info","ts":"2026-07-06T18:32:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b503ecb09e6c7356bdc9b6288fb99ea62ee97e2c7df6ec1eaff33dcaf86472b"} {"level":"info","ts":"2026-07-06T18:32:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76f1a7adc58bd3b4491ad9e9773eecf834498af64ece4a510ed07db70711fa3d"} {"level":"info","ts":"2026-07-06T18:32:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/80cf73e6f8f2a5225618d1bca299213556e83feff14028f195cc7c252b0f82c8"} {"level":"info","ts":"2026-07-06T18:32:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/183d761bee4541a0ceb7f6b659e0f7df3ee5b852d216b17f8f1015e192edc529"} {"level":"info","ts":"2026-07-06T18:32:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53df67608d5abc43924c768cf7345306aa2627316105abec286ccd36d20a9da4"} {"level":"info","ts":"2026-07-06T18:32:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54305d6d30f7756c7a59c23a73cbb6de98a0fc7e00f93c95a8579a5f3c7339e6"} {"level":"info","ts":"2026-07-06T18:32:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/debb82ab007129bd4a99b48506548b3ec3a8d39528f1820d594f8a9e0351806d"} {"level":"info","ts":"2026-07-06T18:32:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f638ca922e83864b53e350e7e1f9a2e44954b6d89f1cd4745b782fe6cef3e71d"} {"level":"info","ts":"2026-07-06T18:32:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eba3f69bd68bdf24a23af98bb9d9f26748b7e5bb05df259ffb6d2bf2262ba43b"} {"level":"info","ts":"2026-07-06T18:32:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc932d6b35dda28719f6617a0f1673df854d3ae01a06618be296e8932a8c943a"} {"level":"info","ts":"2026-07-06T18:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0166686bf4362045ed04a3aab2b50e6c4fa64f22ab130da1941e2525dcea833c"} {"level":"info","ts":"2026-07-06T18:33:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2634e0284e238f21c18c3418c7e348385d08bd5095542beb9264071cb7cec6ee"}