{"level":"info","ts":"2026-06-11T14:34:48Z","logger":"authorino","msg":"setting instance base logger","min level":"debug","mode":"production"} {"level":"info","ts":"2026-06-11T14:34:48Z","logger":"authorino","msg":"build information","version":"0.24.0","commit":"5d6a7135ce05dc530d2e5ffeaffb9f38f3732bb0","dirty":"false","cmd":"server"} {"level":"debug","ts":"2026-06-11T14:34:48Z","logger":"authorino","msg":"setting up with options","allow-superseding-host-subsets":"true","auth-config-label-selector":"","deep-metrics-enabled":"false","enable-leader-election":"false","evaluator-cache-size":"1","ext-auth-grpc-port":"50051","ext-auth-http-port":"5001","health-probe-addr":":8081","kube-client-burst":"30","kube-client-qps":"20","log-level":"debug","log-mode":"production","max-http-request-body-size":"8192","metrics-addr":":8080","oidc-http-port":"8083","oidc-tls-cert":"","oidc-tls-cert-key":"","secret-label-selector":"authorino.kuadrant.io/managed-by=authorino","timeout":"0","tls-cert":"","tls-cert-key":"","tracing-service-endpoint":"","tracing-service-insecure":"false","tracing-service-tag":"[]","watch-namespace":"","webhook-service-port":"9443"} {"level":"info","ts":"2026-06-11T14:34:48Z","logger":"authorino","msg":"starting http auth service","port":5001,"tls":false} {"level":"info","ts":"2026-06-11T14:34:48Z","logger":"authorino","msg":"starting grpc auth service","port":50051,"tls":false} {"level":"info","ts":"2026-06-11T14:34:48Z","logger":"authorino","msg":"starting http oidc service","port":8083,"tls":false} {"level":"info","ts":"2026-06-11T14:34:48Z","logger":"authorino","msg":"starting reconciliation manager"} {"level":"info","ts":"2026-06-11T14:34:48Z","logger":"authorino.controller-runtime.metrics","msg":"Starting metrics server"} {"level":"info","ts":"2026-06-11T14:34:48Z","logger":"authorino","msg":"starting server","kind":"health probe","addr":"[::]:8081"} {"level":"info","ts":"2026-06-11T14:34:48Z","logger":"authorino","msg":"starting status update manager"} {"level":"info","ts":"2026-06-11T14:34:48Z","logger":"authorino.controller-runtime.metrics","msg":"Serving metrics server","bindAddress":":8080","secure":false} {"level":"info","ts":"2026-06-11T14:34:48Z","logger":"authorino","msg":"Starting EventSource","controller":"authconfig","controllerGroup":"authorino.kuadrant.io","controllerKind":"AuthConfig","source":"kind source: *v1beta3.AuthConfig"} {"level":"info","ts":"2026-06-11T14:34:48Z","logger":"authorino","msg":"Starting Controller","controller":"authconfig","controllerGroup":"authorino.kuadrant.io","controllerKind":"AuthConfig"} {"level":"info","ts":"2026-06-11T14:34:48Z","logger":"authorino","msg":"Starting EventSource","controller":"authconfig","controllerGroup":"authorino.kuadrant.io","controllerKind":"AuthConfig","source":"kind source: *v1beta3.AuthConfig"} {"level":"info","ts":"2026-06-11T14:34:48Z","logger":"authorino","msg":"Starting Controller","controller":"authconfig","controllerGroup":"authorino.kuadrant.io","controllerKind":"AuthConfig"} {"level":"info","ts":"2026-06-11T14:34:48Z","logger":"authorino","msg":"Starting EventSource","controller":"secret","controllerGroup":"","controllerKind":"Secret","source":"kind source: *v1.Secret"} {"level":"info","ts":"2026-06-11T14:34:48Z","logger":"authorino","msg":"Starting Controller","controller":"secret","controllerGroup":"","controllerKind":"Secret"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino","msg":"Starting workers","controller":"authconfig","controllerGroup":"authorino.kuadrant.io","controllerKind":"AuthConfig","worker count":1} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino","msg":"Starting workers","controller":"authconfig","controllerGroup":"authorino.kuadrant.io","controllerKind":"AuthConfig","worker count":1} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building the index","count":27} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/b1f82c4ba6cc7617f9c0b90067f72f4a25fdc5de2564c14ccb90af534a2905f6"} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/64a4fb0342f88ea589d83c2f8fa31545655652a27e95b54e34ff1aea7a23ce7a"} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/a89b0896df0d8cd430f1c81b6eb292ddc044daed393537d009a6330718f58d4b"} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c"} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/86cbb62fb4d82d4dc402b3281444539a5625c4bb4c86bbc4912c70e690a2e374"} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7"} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2"} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/df733b2c652bfe2458c9e19932b1091e939c1a62178d6879462b3b4f73fca4bb"} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/319a353672fc7601c875fa3f8b807adf60b64f093f022b2a1c3dfef3ac8cd4f4"} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/bf72a6316f6ed79299511e58d068836cdc71dbca5e23944f783c9340ffa0aee1"} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/5fea747cb803a5ee3aeb620187bd9ec74ccccd10a92474ef528215a7ff146c8f"} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2"} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef"} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.bootstrap","msg":"building index","authconfig":"kuadrant-system/7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino","msg":"Starting workers","controller":"secret","controllerGroup":"","controllerKind":"Secret","worker count":1} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/319a353672fc7601c875fa3f8b807adf60b64f093f022b2a1c3dfef3ac8cd4f4","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/319a353672fc7601c875fa3f8b807adf60b64f093f022b2a1c3dfef3ac8cd4f4"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"319a353672fc7601c875fa3f8b807adf60b64f093f022b2a1c3dfef3ac8cd4f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86"} {"level":"error","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"} {"level":"error","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/b1f82c4ba6cc7617f9c0b90067f72f4a25fdc5de2564c14ccb90af534a2905f6","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"64a4fb0342f88ea589d83c2f8fa31545655652a27e95b54e34ff1aea7a23ce7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1f82c4ba6cc7617f9c0b90067f72f4a25fdc5de2564c14ccb90af534a2905f6"} {"level":"error","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/bf72a6316f6ed79299511e58d068836cdc71dbca5e23944f783c9340ffa0aee1","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"64a4fb0342f88ea589d83c2f8fa31545655652a27e95b54e34ff1aea7a23ce7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf72a6316f6ed79299511e58d068836cdc71dbca5e23944f783c9340ffa0aee1"} {"level":"error","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"error","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/df733b2c652bfe2458c9e19932b1091e939c1a62178d6879462b3b4f73fca4bb","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df733b2c652bfe2458c9e19932b1091e939c1a62178d6879462b3b4f73fca4bb"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1f82c4ba6cc7617f9c0b90067f72f4a25fdc5de2564c14ccb90af534a2905f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf72a6316f6ed79299511e58d068836cdc71dbca5e23944f783c9340ffa0aee1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/64a4fb0342f88ea589d83c2f8fa31545655652a27e95b54e34ff1aea7a23ce7a","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df733b2c652bfe2458c9e19932b1091e939c1a62178d6879462b3b4f73fca4bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64a4fb0342f88ea589d83c2f8fa31545655652a27e95b54e34ff1aea7a23ce7a"} {"level":"error","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef"} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fea747cb803a5ee3aeb620187bd9ec74ccccd10a92474ef528215a7ff146c8f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fea747cb803a5ee3aeb620187bd9ec74ccccd10a92474ef528215a7ff146c8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86cbb62fb4d82d4dc402b3281444539a5625c4bb4c86bbc4912c70e690a2e374","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"} {"level":"error","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86cbb62fb4d82d4dc402b3281444539a5625c4bb4c86bbc4912c70e690a2e374","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a89b0896df0d8cd430f1c81b6eb292ddc044daed393537d009a6330718f58d4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"} {"level":"error","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a89b0896df0d8cd430f1c81b6eb292ddc044daed393537d009a6330718f58d4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2"} {"level":"error","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/5fea747cb803a5ee3aeb620187bd9ec74ccccd10a92474ef528215a7ff146c8f","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fea747cb803a5ee3aeb620187bd9ec74ccccd10a92474ef528215a7ff146c8f"} {"level":"error","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/86cbb62fb4d82d4dc402b3281444539a5625c4bb4c86bbc4912c70e690a2e374","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86cbb62fb4d82d4dc402b3281444539a5625c4bb4c86bbc4912c70e690a2e374"} {"level":"error","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64a4fb0342f88ea589d83c2f8fa31545655652a27e95b54e34ff1aea7a23ce7a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"} {"level":"error","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"error","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"} {"level":"error","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fea747cb803a5ee3aeb620187bd9ec74ccccd10a92474ef528215a7ff146c8f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86cbb62fb4d82d4dc402b3281444539a5625c4bb4c86bbc4912c70e690a2e374","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86cbb62fb4d82d4dc402b3281444539a5625c4bb4c86bbc4912c70e690a2e374"],"numHostsReady":"1/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"} {"level":"error","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86cbb62fb4d82d4dc402b3281444539a5625c4bb4c86bbc4912c70e690a2e374","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a89b0896df0d8cd430f1c81b6eb292ddc044daed393537d009a6330718f58d4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"],"numHostsReady":"1/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"error","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"],"numHostsReady":"1/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2"} {"level":"error","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c"],"numHostsReady":"1/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"],"numHostsReady":"1/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"error","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/a89b0896df0d8cd430f1c81b6eb292ddc044daed393537d009a6330718f58d4b","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86cbb62fb4d82d4dc402b3281444539a5625c4bb4c86bbc4912c70e690a2e374","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a89b0896df0d8cd430f1c81b6eb292ddc044daed393537d009a6330718f58d4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a89b0896df0d8cd430f1c81b6eb292ddc044daed393537d009a6330718f58d4b"} {"level":"error","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a89b0896df0d8cd430f1c81b6eb292ddc044daed393537d009a6330718f58d4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2"],"numHostsReady":"1/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"error","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/64a4fb0342f88ea589d83c2f8fa31545655652a27e95b54e34ff1aea7a23ce7a","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"],"numHostsReady":"1/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64a4fb0342f88ea589d83c2f8fa31545655652a27e95b54e34ff1aea7a23ce7a"} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a89b0896df0d8cd430f1c81b6eb292ddc044daed393537d009a6330718f58d4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-11T14:34:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a89b0896df0d8cd430f1c81b6eb292ddc044daed393537d009a6330718f58d4b"],"numHostsReady":"1/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a89b0896df0d8cd430f1c81b6eb292ddc044daed393537d009a6330718f58d4b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a89b0896df0d8cd430f1c81b6eb292ddc044daed393537d009a6330718f58d4b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"} {"level":"error","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"} {"level":"error","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef"} {"level":"error","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"} {"level":"error","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"error","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/5fea747cb803a5ee3aeb620187bd9ec74ccccd10a92474ef528215a7ff146c8f","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fea747cb803a5ee3aeb620187bd9ec74ccccd10a92474ef528215a7ff146c8f"} {"level":"error","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/86cbb62fb4d82d4dc402b3281444539a5625c4bb4c86bbc4912c70e690a2e374","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86cbb62fb4d82d4dc402b3281444539a5625c4bb4c86bbc4912c70e690a2e374"} {"level":"error","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"error","ts":"2026-06-11T14:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2"} {"level":"error","ts":"2026-06-11T14:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"} {"level":"error","ts":"2026-06-11T14:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"} {"level":"error","ts":"2026-06-11T14:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c"} {"level":"debug","ts":"2026-06-11T14:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1f82c4ba6cc7617f9c0b90067f72f4a25fdc5de2564c14ccb90af534a2905f6","namespace":"kuadrant-system"}} {"level":"error","ts":"2026-06-11T14:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7"} {"level":"error","ts":"2026-06-11T14:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"error","ts":"2026-06-11T14:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/a89b0896df0d8cd430f1c81b6eb292ddc044daed393537d009a6330718f58d4b","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a89b0896df0d8cd430f1c81b6eb292ddc044daed393537d009a6330718f58d4b"} {"level":"error","ts":"2026-06-11T14:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/b1f82c4ba6cc7617f9c0b90067f72f4a25fdc5de2564c14ccb90af534a2905f6","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-11T14:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf72a6316f6ed79299511e58d068836cdc71dbca5e23944f783c9340ffa0aee1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-11T14:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1f82c4ba6cc7617f9c0b90067f72f4a25fdc5de2564c14ccb90af534a2905f6"} {"level":"error","ts":"2026-06-11T14:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/bf72a6316f6ed79299511e58d068836cdc71dbca5e23944f783c9340ffa0aee1","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf72a6316f6ed79299511e58d068836cdc71dbca5e23944f783c9340ffa0aee1"} {"level":"debug","ts":"2026-06-11T14:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","namespace":"kuadrant-system"}} {"level":"error","ts":"2026-06-11T14:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc09b530b46a73b0d4ddb40e465580cff15db19d77e93e4903c9737647deeb1a"} {"level":"debug","ts":"2026-06-11T14:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"df733b2c652bfe2458c9e19932b1091e939c1a62178d6879462b3b4f73fca4bb","namespace":"kuadrant-system"}} {"level":"error","ts":"2026-06-11T14:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/df733b2c652bfe2458c9e19932b1091e939c1a62178d6879462b3b4f73fca4bb","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-11T14:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-11T14:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/df733b2c652bfe2458c9e19932b1091e939c1a62178d6879462b3b4f73fca4bb"} {"level":"error","ts":"2026-06-11T14:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-11T14:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-11T14:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9903213c635804dd416e9f12956f0fa896195627091daaf593a30df64cf640c5"} {"level":"debug","ts":"2026-06-11T14:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","namespace":"kuadrant-system"}} {"level":"error","ts":"2026-06-11T14:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-11T14:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-11T14:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/35d34d59676c333235d7c9f02273e0380bb39f27cfd30856fedc0f7c0e5f79aa"} {"level":"error","ts":"2026-06-11T14:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/edcceb5a2e0cf1edde0fc3ed43068ce5b123a6fdc41949959c2c3b7a5a48bf24"} {"level":"error","ts":"2026-06-11T14:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-11T14:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"319a353672fc7601c875fa3f8b807adf60b64f093f022b2a1c3dfef3ac8cd4f4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-11T14:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18e32965997cdd9967355c6fa5264ed12c0a215989d459ed88d7d6de02865f76"} {"level":"error","ts":"2026-06-11T14:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/319a353672fc7601c875fa3f8b807adf60b64f093f022b2a1c3dfef3ac8cd4f4","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/319a353672fc7601c875fa3f8b807adf60b64f093f022b2a1c3dfef3ac8cd4f4"} {"level":"debug","ts":"2026-06-11T14:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","namespace":"kuadrant-system"}} {"level":"error","ts":"2026-06-11T14:34:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e38d76c6f386f12bc12190c87b39e6e77e182be454f85659a9197c301f2cd9be"} {"level":"debug","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-11T14:34:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-11T14:34:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2"} {"level":"error","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2"} {"level":"debug","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-11T14:34:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-11T14:34:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2"],"numHostsReady":"1/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","namespace":"kuadrant-system"}} {"level":"error","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a89b0896df0d8cd430f1c81b6eb292ddc044daed393537d009a6330718f58d4b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c0d47082320c9bb02d3788ab2b052c696af91abc2ae438437ae71a26936c7c2"} {"level":"error","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d3b195a61a7f24c6bf1fba40f9f2e2565facb6af92e959c1546ac398a9172618"} {"level":"error","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/a89b0896df0d8cd430f1c81b6eb292ddc044daed393537d009a6330718f58d4b","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a89b0896df0d8cd430f1c81b6eb292ddc044daed393537d009a6330718f58d4b"} {"level":"error","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bbfc0b2e9e9acadd41342cd7c36a24afa8a5eef942d161782a6adae8411158a"} {"level":"debug","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","namespace":"kuadrant-system"}} {"level":"error","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fea747cb803a5ee3aeb620187bd9ec74ccccd10a92474ef528215a7ff146c8f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/80f10756c0e833d16937036ed66f1daf5bef95559ef05a5e852766b97b9bdaef"} {"level":"error","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01918e70442d2cb18c94316131b0e0a241b4a5d12df5b1e1981a3bef420bbdb5"} {"level":"error","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/5fea747cb803a5ee3aeb620187bd9ec74ccccd10a92474ef528215a7ff146c8f","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fea747cb803a5ee3aeb620187bd9ec74ccccd10a92474ef528215a7ff146c8f"} {"level":"error","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dd75e19cd66d310c30638e330078972afd6d2d96305f91055bc6a6f363fb8d3"} {"level":"debug","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c","namespace":"kuadrant-system"}} {"level":"error","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"64a4fb0342f88ea589d83c2f8fa31545655652a27e95b54e34ff1aea7a23ce7a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/331dc257e65f55f80700a586f7807093eda7b3d8e7d91215dc3c47731508480c"} {"level":"error","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/64a4fb0342f88ea589d83c2f8fa31545655652a27e95b54e34ff1aea7a23ce7a","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/64a4fb0342f88ea589d83c2f8fa31545655652a27e95b54e34ff1aea7a23ce7a"} {"level":"debug","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","namespace":"kuadrant-system"}} {"level":"error","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e50f5fdcb9fb7e124557afe69edae9a95d05da488eae1cc4b5c1c7c1220a826a"} {"level":"error","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dc75fc8307b952a3e873400cf417e90f2861e8a225abec4b22708deb7901db7"} {"level":"error","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4dc577fd60594d78a4a8bebe396f4b5a928f41bdc3f95c06d717cf1ddc3158b2"} {"level":"error","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/311b1be286674fd5684c9ac59b318287dade9769cfe4aeebd8c88e2dc6b72418"} {"level":"debug","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-11T14:34:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-11T14:34:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86"} {"level":"error","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86cbb62fb4d82d4dc402b3281444539a5625c4bb4c86bbc4912c70e690a2e374","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-11T14:34:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-11T14:34:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86"],"numHostsReady":"1/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36a57cb26c1f3baa754055a5b21729579f55f7d59e2035fdb41cf938a33d7612"} {"level":"error","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-11T14:34:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-11T14:34:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86"} {"level":"info","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-11T14:34:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-11T14:34:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86"],"numHostsReady":"1/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/86cbb62fb4d82d4dc402b3281444539a5625c4bb4c86bbc4912c70e690a2e374","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-11T14:34:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-11T14:34:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86"],"numHostsReady":"1/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86cbb62fb4d82d4dc402b3281444539a5625c4bb4c86bbc4912c70e690a2e374"} {"level":"error","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-11T14:34:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-11T14:34:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-06-11T14:34:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-06-11T14:34:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86"} {"level":"error","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"}} {"level":"error","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86"} {"level":"debug","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-06-11T14:34:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-06-11T14:34:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86"],"numHostsReady":"1/1","numIdentitySources":3,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","namespace":"kuadrant-system"}} {"level":"error","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.jwt","msg":"failed to discovery openid connect configuration","authconfig":"kuadrant-system/7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86","issuerUrl":"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a","error":"Get \"https://keycloak.apps.508653fb-9100-4d72-bfc7-25926db865a8.prod.konfluxeaas.com/realms/tenant-a/.well-known/openid-configuration\": tls: failed to verify certificate: x509: certificate signed by unknown authority","stacktrace":"github.com/kuadrant/authorino/pkg/evaluators/identity.(*oidcProviderVerifier).getOpenIdProvider\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:164\ngithub.com/kuadrant/authorino/pkg/evaluators/identity.NewOIDCProviderVerifier\n\t/usr/src/authorino/pkg/evaluators/identity/jwt.go:106\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).translateAuthConfig\n\t/usr/src/authorino/controllers/auth_config_controller.go:342\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigReconciler).Reconcile\n\t/usr/src/authorino/controllers/auth_config_controller.go:156\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"info","ts":"2026-06-11T14:34:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7371c34ce8e4df2309ee8f952c87f921947b289427b6e9ea579dcb9970fc1b86"}