--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-16T00:49:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c25cfe8ddb4bb4f9ea67c2010fcb205b3634e9ce00cbec489b0d09e4d89aca"} {"level":"info","ts":"2026-07-16T00:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5fc3d848de0c8ddee3ccc92067557f1a6a7fa3663f8bcccfb9de98078a86c1f5"} {"level":"info","ts":"2026-07-16T00:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a4baf259c36580def2d1f6a65073946157d94708275847278cf1f73e39f1ff4"} {"level":"info","ts":"2026-07-16T00:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd5b00e6d84be9e5d4f5f81c6d29e4b501ebcbd04523246a0fc5cdcb70fe7896"} {"level":"info","ts":"2026-07-16T00:49:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfc64c39ae82a8feaba4c03ced743dfda481bebab4a21f089a68a6fd7aeb1aea"} {"level":"info","ts":"2026-07-16T00:49:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa48f498385db30f360b7486bdcbea0da036ac5cbbd1452acd6a3dd3a2ed68fd"} {"level":"info","ts":"2026-07-16T00:49:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/491d32c4b8d1972fa67b58d55ad5de2deac6506eb67036e5bdf20999fdda5d8c"} {"level":"info","ts":"2026-07-16T00:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e05d65774bb0086c9947ec8e75af307f5efa92393f69e68b1b8e562246829e0"} {"level":"info","ts":"2026-07-16T00:49:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/06c25cfe8ddb4bb4f9ea67c2010fcb205b3634e9ce00cbec489b0d09e4d89aca"} {"level":"debug","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d968655d1fe2f245a31937d921d69d822c5b5b355034085130c7d7fe69bca32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d968655d1fe2f245a31937d921d69d822c5b5b355034085130c7d7fe69bca32"} {"level":"info","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d968655d1fe2f245a31937d921d69d822c5b5b355034085130c7d7fe69bca32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d968655d1fe2f245a31937d921d69d822c5b5b355034085130c7d7fe69bca32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d968655d1fe2f245a31937d921d69d822c5b5b355034085130c7d7fe69bca32","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d968655d1fe2f245a31937d921d69d822c5b5b355034085130c7d7fe69bca32"} {"level":"debug","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d968655d1fe2f245a31937d921d69d822c5b5b355034085130c7d7fe69bca32","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d968655d1fe2f245a31937d921d69d822c5b5b355034085130c7d7fe69bca32"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d968655d1fe2f245a31937d921d69d822c5b5b355034085130c7d7fe69bca32","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d968655d1fe2f245a31937d921d69d822c5b5b355034085130c7d7fe69bca32","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d968655d1fe2f245a31937d921d69d822c5b5b355034085130c7d7fe69bca32"} {"level":"debug","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b39147baee9536afebb73b1addb9d56b75345529e3c8d84ab6b67da78d4120c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b39147baee9536afebb73b1addb9d56b75345529e3c8d84ab6b67da78d4120c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b39147baee9536afebb73b1addb9d56b75345529e3c8d84ab6b67da78d4120c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b39147baee9536afebb73b1addb9d56b75345529e3c8d84ab6b67da78d4120c"} {"level":"info","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b39147baee9536afebb73b1addb9d56b75345529e3c8d84ab6b67da78d4120c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b39147baee9536afebb73b1addb9d56b75345529e3c8d84ab6b67da78d4120c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3b39147baee9536afebb73b1addb9d56b75345529e3c8d84ab6b67da78d4120c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3b39147baee9536afebb73b1addb9d56b75345529e3c8d84ab6b67da78d4120c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b39147baee9536afebb73b1addb9d56b75345529e3c8d84ab6b67da78d4120c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b39147baee9536afebb73b1addb9d56b75345529e3c8d84ab6b67da78d4120c"} {"level":"debug","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b39147baee9536afebb73b1addb9d56b75345529e3c8d84ab6b67da78d4120c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b39147baee9536afebb73b1addb9d56b75345529e3c8d84ab6b67da78d4120c"} {"level":"debug","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"253411cb8ec518faed077c3c98ede35efc9ab5c246f46f011576d39b04279398","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"253411cb8ec518faed077c3c98ede35efc9ab5c246f46f011576d39b04279398","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8445f78bdd7600415f58d20599fd5a974ab38018cd8eedf1e58ce9026c13499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8445f78bdd7600415f58d20599fd5a974ab38018cd8eedf1e58ce9026c13499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"253411cb8ec518faed077c3c98ede35efc9ab5c246f46f011576d39b04279398","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/253411cb8ec518faed077c3c98ede35efc9ab5c246f46f011576d39b04279398"} {"level":"info","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"253411cb8ec518faed077c3c98ede35efc9ab5c246f46f011576d39b04279398","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8445f78bdd7600415f58d20599fd5a974ab38018cd8eedf1e58ce9026c13499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8445f78bdd7600415f58d20599fd5a974ab38018cd8eedf1e58ce9026c13499"} {"level":"info","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8445f78bdd7600415f58d20599fd5a974ab38018cd8eedf1e58ce9026c13499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b39147baee9536afebb73b1addb9d56b75345529e3c8d84ab6b67da78d4120c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b39147baee9536afebb73b1addb9d56b75345529e3c8d84ab6b67da78d4120c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/253411cb8ec518faed077c3c98ede35efc9ab5c246f46f011576d39b04279398"} {"level":"info","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b39147baee9536afebb73b1addb9d56b75345529e3c8d84ab6b67da78d4120c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"253411cb8ec518faed077c3c98ede35efc9ab5c246f46f011576d39b04279398","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["253411cb8ec518faed077c3c98ede35efc9ab5c246f46f011576d39b04279398"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"253411cb8ec518faed077c3c98ede35efc9ab5c246f46f011576d39b04279398","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8445f78bdd7600415f58d20599fd5a974ab38018cd8eedf1e58ce9026c13499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b39147baee9536afebb73b1addb9d56b75345529e3c8d84ab6b67da78d4120c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"253411cb8ec518faed077c3c98ede35efc9ab5c246f46f011576d39b04279398","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8445f78bdd7600415f58d20599fd5a974ab38018cd8eedf1e58ce9026c13499"} {"level":"debug","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b39147baee9536afebb73b1addb9d56b75345529e3c8d84ab6b67da78d4120c"} {"level":"info","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c8445f78bdd7600415f58d20599fd5a974ab38018cd8eedf1e58ce9026c13499","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c8445f78bdd7600415f58d20599fd5a974ab38018cd8eedf1e58ce9026c13499"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c8445f78bdd7600415f58d20599fd5a974ab38018cd8eedf1e58ce9026c13499","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c8445f78bdd7600415f58d20599fd5a974ab38018cd8eedf1e58ce9026c13499","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/253411cb8ec518faed077c3c98ede35efc9ab5c246f46f011576d39b04279398"} {"level":"debug","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd"} {"level":"info","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c8445f78bdd7600415f58d20599fd5a974ab38018cd8eedf1e58ce9026c13499"} {"level":"debug","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd"} {"level":"debug","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd"} {"level":"debug","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2bebcd10c951698ac82906ad25901e59153d3fd7c8bbd59e80b83bf6a1bdae6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd"} {"level":"info","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2bebcd10c951698ac82906ad25901e59153d3fd7c8bbd59e80b83bf6a1bdae6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2bebcd10c951698ac82906ad25901e59153d3fd7c8bbd59e80b83bf6a1bdae6"} {"level":"info","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2bebcd10c951698ac82906ad25901e59153d3fd7c8bbd59e80b83bf6a1bdae6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2bebcd10c951698ac82906ad25901e59153d3fd7c8bbd59e80b83bf6a1bdae6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2bebcd10c951698ac82906ad25901e59153d3fd7c8bbd59e80b83bf6a1bdae6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd"} {"level":"info","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2bebcd10c951698ac82906ad25901e59153d3fd7c8bbd59e80b83bf6a1bdae6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2bebcd10c951698ac82906ad25901e59153d3fd7c8bbd59e80b83bf6a1bdae6"} {"level":"info","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2bebcd10c951698ac82906ad25901e59153d3fd7c8bbd59e80b83bf6a1bdae6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d2bebcd10c951698ac82906ad25901e59153d3fd7c8bbd59e80b83bf6a1bdae6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d2bebcd10c951698ac82906ad25901e59153d3fd7c8bbd59e80b83bf6a1bdae6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd"} {"level":"info","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d2bebcd10c951698ac82906ad25901e59153d3fd7c8bbd59e80b83bf6a1bdae6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:50:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2bebcd10c951698ac82906ad25901e59153d3fd7c8bbd59e80b83bf6a1bdae6"} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d2bebcd10c951698ac82906ad25901e59153d3fd7c8bbd59e80b83bf6a1bdae6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48bd9d200cdbb4104ef6fa148ee0c7098ff175f5628ee7c2720899b35a472624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48bd9d200cdbb4104ef6fa148ee0c7098ff175f5628ee7c2720899b35a472624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b59c85cf0f18e5d3067f9ce66dc946fb05fb507566d7d1772ef0948068da1858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48bd9d200cdbb4104ef6fa148ee0c7098ff175f5628ee7c2720899b35a472624"} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b59c85cf0f18e5d3067f9ce66dc946fb05fb507566d7d1772ef0948068da1858","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48bd9d200cdbb4104ef6fa148ee0c7098ff175f5628ee7c2720899b35a472624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48bd9d200cdbb4104ef6fa148ee0c7098ff175f5628ee7c2720899b35a472624"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d2bebcd10c951698ac82906ad25901e59153d3fd7c8bbd59e80b83bf6a1bdae6"} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48bd9d200cdbb4104ef6fa148ee0c7098ff175f5628ee7c2720899b35a472624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b59c85cf0f18e5d3067f9ce66dc946fb05fb507566d7d1772ef0948068da1858","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48bd9d200cdbb4104ef6fa148ee0c7098ff175f5628ee7c2720899b35a472624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b59c85cf0f18e5d3067f9ce66dc946fb05fb507566d7d1772ef0948068da1858","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd"} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b59c85cf0f18e5d3067f9ce66dc946fb05fb507566d7d1772ef0948068da1858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b59c85cf0f18e5d3067f9ce66dc946fb05fb507566d7d1772ef0948068da1858"} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b59c85cf0f18e5d3067f9ce66dc946fb05fb507566d7d1772ef0948068da1858","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b59c85cf0f18e5d3067f9ce66dc946fb05fb507566d7d1772ef0948068da1858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b59c85cf0f18e5d3067f9ce66dc946fb05fb507566d7d1772ef0948068da1858"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48bd9d200cdbb4104ef6fa148ee0c7098ff175f5628ee7c2720899b35a472624"} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b59c85cf0f18e5d3067f9ce66dc946fb05fb507566d7d1772ef0948068da1858","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"097a2c948457da43304619bcbe6a8e0954b46e9a496d42b6a17e7bed5cb0f710","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b59c85cf0f18e5d3067f9ce66dc946fb05fb507566d7d1772ef0948068da1858"} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"097a2c948457da43304619bcbe6a8e0954b46e9a496d42b6a17e7bed5cb0f710","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b59c85cf0f18e5d3067f9ce66dc946fb05fb507566d7d1772ef0948068da1858","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ec40d5195356941429f8fe254d568524a996761a39a727ffbd6d5fb44fd37a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ec40d5195356941429f8fe254d568524a996761a39a727ffbd6d5fb44fd37a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"097a2c948457da43304619bcbe6a8e0954b46e9a496d42b6a17e7bed5cb0f710","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/097a2c948457da43304619bcbe6a8e0954b46e9a496d42b6a17e7bed5cb0f710"} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"097a2c948457da43304619bcbe6a8e0954b46e9a496d42b6a17e7bed5cb0f710","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b59c85cf0f18e5d3067f9ce66dc946fb05fb507566d7d1772ef0948068da1858","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ec40d5195356941429f8fe254d568524a996761a39a727ffbd6d5fb44fd37a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ec40d5195356941429f8fe254d568524a996761a39a727ffbd6d5fb44fd37a8"} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ec40d5195356941429f8fe254d568524a996761a39a727ffbd6d5fb44fd37a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"097a2c948457da43304619bcbe6a8e0954b46e9a496d42b6a17e7bed5cb0f710","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["097a2c948457da43304619bcbe6a8e0954b46e9a496d42b6a17e7bed5cb0f710"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b59c85cf0f18e5d3067f9ce66dc946fb05fb507566d7d1772ef0948068da1858"} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"097a2c948457da43304619bcbe6a8e0954b46e9a496d42b6a17e7bed5cb0f710","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ec40d5195356941429f8fe254d568524a996761a39a727ffbd6d5fb44fd37a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ec40d5195356941429f8fe254d568524a996761a39a727ffbd6d5fb44fd37a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ec40d5195356941429f8fe254d568524a996761a39a727ffbd6d5fb44fd37a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"097a2c948457da43304619bcbe6a8e0954b46e9a496d42b6a17e7bed5cb0f710","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/097a2c948457da43304619bcbe6a8e0954b46e9a496d42b6a17e7bed5cb0f710"} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"097a2c948457da43304619bcbe6a8e0954b46e9a496d42b6a17e7bed5cb0f710","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0409e62f114fe20c68f8619954229e86bf8b07d6d009e951c39e9ad824487cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ec40d5195356941429f8fe254d568524a996761a39a727ffbd6d5fb44fd37a8"} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0409e62f114fe20c68f8619954229e86bf8b07d6d009e951c39e9ad824487cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ec40d5195356941429f8fe254d568524a996761a39a727ffbd6d5fb44fd37a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"097a2c948457da43304619bcbe6a8e0954b46e9a496d42b6a17e7bed5cb0f710","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["097a2c948457da43304619bcbe6a8e0954b46e9a496d42b6a17e7bed5cb0f710"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0409e62f114fe20c68f8619954229e86bf8b07d6d009e951c39e9ad824487cb"} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"097a2c948457da43304619bcbe6a8e0954b46e9a496d42b6a17e7bed5cb0f710","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0409e62f114fe20c68f8619954229e86bf8b07d6d009e951c39e9ad824487cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0409e62f114fe20c68f8619954229e86bf8b07d6d009e951c39e9ad824487cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/097a2c948457da43304619bcbe6a8e0954b46e9a496d42b6a17e7bed5cb0f710"} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0409e62f114fe20c68f8619954229e86bf8b07d6d009e951c39e9ad824487cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"097a2c948457da43304619bcbe6a8e0954b46e9a496d42b6a17e7bed5cb0f710","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0409e62f114fe20c68f8619954229e86bf8b07d6d009e951c39e9ad824487cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0409e62f114fe20c68f8619954229e86bf8b07d6d009e951c39e9ad824487cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0409e62f114fe20c68f8619954229e86bf8b07d6d009e951c39e9ad824487cb"} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0409e62f114fe20c68f8619954229e86bf8b07d6d009e951c39e9ad824487cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0409e62f114fe20c68f8619954229e86bf8b07d6d009e951c39e9ad824487cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0409e62f114fe20c68f8619954229e86bf8b07d6d009e951c39e9ad824487cb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0409e62f114fe20c68f8619954229e86bf8b07d6d009e951c39e9ad824487cb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/097a2c948457da43304619bcbe6a8e0954b46e9a496d42b6a17e7bed5cb0f710"} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0409e62f114fe20c68f8619954229e86bf8b07d6d009e951c39e9ad824487cb"} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189"} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189"} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189"} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189"} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189"} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189"} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189"} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189"} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189"} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189"} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189"} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189"} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189"} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189"} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:50:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:50:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189"} {"level":"debug","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"204eb8a47d2c7abc64c86af10bf13a2acaac035e57ed6941698522373e27f3fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"204eb8a47d2c7abc64c86af10bf13a2acaac035e57ed6941698522373e27f3fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"204eb8a47d2c7abc64c86af10bf13a2acaac035e57ed6941698522373e27f3fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/204eb8a47d2c7abc64c86af10bf13a2acaac035e57ed6941698522373e27f3fb"} {"level":"debug","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"204eb8a47d2c7abc64c86af10bf13a2acaac035e57ed6941698522373e27f3fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/204eb8a47d2c7abc64c86af10bf13a2acaac035e57ed6941698522373e27f3fb"} {"level":"debug","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"204eb8a47d2c7abc64c86af10bf13a2acaac035e57ed6941698522373e27f3fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["204eb8a47d2c7abc64c86af10bf13a2acaac035e57ed6941698522373e27f3fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"204eb8a47d2c7abc64c86af10bf13a2acaac035e57ed6941698522373e27f3fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"204eb8a47d2c7abc64c86af10bf13a2acaac035e57ed6941698522373e27f3fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"204eb8a47d2c7abc64c86af10bf13a2acaac035e57ed6941698522373e27f3fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"204eb8a47d2c7abc64c86af10bf13a2acaac035e57ed6941698522373e27f3fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/204eb8a47d2c7abc64c86af10bf13a2acaac035e57ed6941698522373e27f3fb"} {"level":"debug","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"204eb8a47d2c7abc64c86af10bf13a2acaac035e57ed6941698522373e27f3fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbeaa6c132f6e912989ae3a422b5dfd20c370230afa8178a6c8d705dd626bb02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:51:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/204eb8a47d2c7abc64c86af10bf13a2acaac035e57ed6941698522373e27f3fb"} {"level":"info","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbeaa6c132f6e912989ae3a422b5dfd20c370230afa8178a6c8d705dd626bb02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"204eb8a47d2c7abc64c86af10bf13a2acaac035e57ed6941698522373e27f3fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["204eb8a47d2c7abc64c86af10bf13a2acaac035e57ed6941698522373e27f3fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbeaa6c132f6e912989ae3a422b5dfd20c370230afa8178a6c8d705dd626bb02"} {"level":"info","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"204eb8a47d2c7abc64c86af10bf13a2acaac035e57ed6941698522373e27f3fb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbeaa6c132f6e912989ae3a422b5dfd20c370230afa8178a6c8d705dd626bb02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbeaa6c132f6e912989ae3a422b5dfd20c370230afa8178a6c8d705dd626bb02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"204eb8a47d2c7abc64c86af10bf13a2acaac035e57ed6941698522373e27f3fb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbeaa6c132f6e912989ae3a422b5dfd20c370230afa8178a6c8d705dd626bb02"} {"level":"debug","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbeaa6c132f6e912989ae3a422b5dfd20c370230afa8178a6c8d705dd626bb02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbeaa6c132f6e912989ae3a422b5dfd20c370230afa8178a6c8d705dd626bb02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/204eb8a47d2c7abc64c86af10bf13a2acaac035e57ed6941698522373e27f3fb"} {"level":"info","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbeaa6c132f6e912989ae3a422b5dfd20c370230afa8178a6c8d705dd626bb02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbeaa6c132f6e912989ae3a422b5dfd20c370230afa8178a6c8d705dd626bb02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbeaa6c132f6e912989ae3a422b5dfd20c370230afa8178a6c8d705dd626bb02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbeaa6c132f6e912989ae3a422b5dfd20c370230afa8178a6c8d705dd626bb02"} {"level":"info","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbeaa6c132f6e912989ae3a422b5dfd20c370230afa8178a6c8d705dd626bb02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbeaa6c132f6e912989ae3a422b5dfd20c370230afa8178a6c8d705dd626bb02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cbeaa6c132f6e912989ae3a422b5dfd20c370230afa8178a6c8d705dd626bb02","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cbeaa6c132f6e912989ae3a422b5dfd20c370230afa8178a6c8d705dd626bb02\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbeaa6c132f6e912989ae3a422b5dfd20c370230afa8178a6c8d705dd626bb02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbeaa6c132f6e912989ae3a422b5dfd20c370230afa8178a6c8d705dd626bb02","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbeaa6c132f6e912989ae3a422b5dfd20c370230afa8178a6c8d705dd626bb02"} {"level":"info","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbeaa6c132f6e912989ae3a422b5dfd20c370230afa8178a6c8d705dd626bb02"} {"level":"debug","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbeaa6c132f6e912989ae3a422b5dfd20c370230afa8178a6c8d705dd626bb02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbeaa6c132f6e912989ae3a422b5dfd20c370230afa8178a6c8d705dd626bb02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/269d92cb6b70d694305df29e00a2f1a85f6a9858e27d91d04829c660a3706637"} {"level":"info","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbeaa6c132f6e912989ae3a422b5dfd20c370230afa8178a6c8d705dd626bb02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"269d92cb6b70d694305df29e00a2f1a85f6a9858e27d91d04829c660a3706637","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["269d92cb6b70d694305df29e00a2f1a85f6a9858e27d91d04829c660a3706637"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"269d92cb6b70d694305df29e00a2f1a85f6a9858e27d91d04829c660a3706637","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbeaa6c132f6e912989ae3a422b5dfd20c370230afa8178a6c8d705dd626bb02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbeaa6c132f6e912989ae3a422b5dfd20c370230afa8178a6c8d705dd626bb02"} {"level":"info","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbeaa6c132f6e912989ae3a422b5dfd20c370230afa8178a6c8d705dd626bb02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"269d92cb6b70d694305df29e00a2f1a85f6a9858e27d91d04829c660a3706637","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:51:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:51:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/269d92cb6b70d694305df29e00a2f1a85f6a9858e27d91d04829c660a3706637"} {"level":"info","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"269d92cb6b70d694305df29e00a2f1a85f6a9858e27d91d04829c660a3706637","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbeaa6c132f6e912989ae3a422b5dfd20c370230afa8178a6c8d705dd626bb02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"269d92cb6b70d694305df29e00a2f1a85f6a9858e27d91d04829c660a3706637","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["269d92cb6b70d694305df29e00a2f1a85f6a9858e27d91d04829c660a3706637"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbeaa6c132f6e912989ae3a422b5dfd20c370230afa8178a6c8d705dd626bb02"} {"level":"info","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"269d92cb6b70d694305df29e00a2f1a85f6a9858e27d91d04829c660a3706637","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbeaa6c132f6e912989ae3a422b5dfd20c370230afa8178a6c8d705dd626bb02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:51:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:51:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbeaa6c132f6e912989ae3a422b5dfd20c370230afa8178a6c8d705dd626bb02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/269d92cb6b70d694305df29e00a2f1a85f6a9858e27d91d04829c660a3706637"} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbeaa6c132f6e912989ae3a422b5dfd20c370230afa8178a6c8d705dd626bb02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"269d92cb6b70d694305df29e00a2f1a85f6a9858e27d91d04829c660a3706637","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5"} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbeaa6c132f6e912989ae3a422b5dfd20c370230afa8178a6c8d705dd626bb02","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/269d92cb6b70d694305df29e00a2f1a85f6a9858e27d91d04829c660a3706637"} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbeaa6c132f6e912989ae3a422b5dfd20c370230afa8178a6c8d705dd626bb02"} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5"} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abca3197496ee834925bcaaca9b52d9e053c609779928bfec5ffc1347be8af16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5"} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abca3197496ee834925bcaaca9b52d9e053c609779928bfec5ffc1347be8af16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abca3197496ee834925bcaaca9b52d9e053c609779928bfec5ffc1347be8af16"} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abca3197496ee834925bcaaca9b52d9e053c609779928bfec5ffc1347be8af16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abca3197496ee834925bcaaca9b52d9e053c609779928bfec5ffc1347be8af16"} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abca3197496ee834925bcaaca9b52d9e053c609779928bfec5ffc1347be8af16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abca3197496ee834925bcaaca9b52d9e053c609779928bfec5ffc1347be8af16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["abca3197496ee834925bcaaca9b52d9e053c609779928bfec5ffc1347be8af16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5"} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abca3197496ee834925bcaaca9b52d9e053c609779928bfec5ffc1347be8af16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abca3197496ee834925bcaaca9b52d9e053c609779928bfec5ffc1347be8af16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abca3197496ee834925bcaaca9b52d9e053c609779928bfec5ffc1347be8af16"} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abca3197496ee834925bcaaca9b52d9e053c609779928bfec5ffc1347be8af16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0806e7f6032154e9d45c594a1ff73b1e5807f92fe4c38fb66eb3f9a158259fc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5"} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0806e7f6032154e9d45c594a1ff73b1e5807f92fe4c38fb66eb3f9a158259fc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abca3197496ee834925bcaaca9b52d9e053c609779928bfec5ffc1347be8af16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["abca3197496ee834925bcaaca9b52d9e053c609779928bfec5ffc1347be8af16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abca3197496ee834925bcaaca9b52d9e053c609779928bfec5ffc1347be8af16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0806e7f6032154e9d45c594a1ff73b1e5807f92fe4c38fb66eb3f9a158259fc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0806e7f6032154e9d45c594a1ff73b1e5807f92fe4c38fb66eb3f9a158259fc6"} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0806e7f6032154e9d45c594a1ff73b1e5807f92fe4c38fb66eb3f9a158259fc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abca3197496ee834925bcaaca9b52d9e053c609779928bfec5ffc1347be8af16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abca3197496ee834925bcaaca9b52d9e053c609779928bfec5ffc1347be8af16"} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abca3197496ee834925bcaaca9b52d9e053c609779928bfec5ffc1347be8af16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0806e7f6032154e9d45c594a1ff73b1e5807f92fe4c38fb66eb3f9a158259fc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0806e7f6032154e9d45c594a1ff73b1e5807f92fe4c38fb66eb3f9a158259fc6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5"} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0806e7f6032154e9d45c594a1ff73b1e5807f92fe4c38fb66eb3f9a158259fc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abca3197496ee834925bcaaca9b52d9e053c609779928bfec5ffc1347be8af16","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["abca3197496ee834925bcaaca9b52d9e053c609779928bfec5ffc1347be8af16"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0806e7f6032154e9d45c594a1ff73b1e5807f92fe4c38fb66eb3f9a158259fc6"} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abca3197496ee834925bcaaca9b52d9e053c609779928bfec5ffc1347be8af16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abca3197496ee834925bcaaca9b52d9e053c609779928bfec5ffc1347be8af16"} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0806e7f6032154e9d45c594a1ff73b1e5807f92fe4c38fb66eb3f9a158259fc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abca3197496ee834925bcaaca9b52d9e053c609779928bfec5ffc1347be8af16","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5"} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1305195a18fc1646bc3fc3866cdb388326733b972575849d128205c598769e50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0806e7f6032154e9d45c594a1ff73b1e5807f92fe4c38fb66eb3f9a158259fc6"} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1305195a18fc1646bc3fc3866cdb388326733b972575849d128205c598769e50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abca3197496ee834925bcaaca9b52d9e053c609779928bfec5ffc1347be8af16"} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1305195a18fc1646bc3fc3866cdb388326733b972575849d128205c598769e50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1305195a18fc1646bc3fc3866cdb388326733b972575849d128205c598769e50"} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1305195a18fc1646bc3fc3866cdb388326733b972575849d128205c598769e50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5"} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382"} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1305195a18fc1646bc3fc3866cdb388326733b972575849d128205c598769e50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1305195a18fc1646bc3fc3866cdb388326733b972575849d128205c598769e50"} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5"} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1305195a18fc1646bc3fc3866cdb388326733b972575849d128205c598769e50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1305195a18fc1646bc3fc3866cdb388326733b972575849d128205c598769e50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382"} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1305195a18fc1646bc3fc3866cdb388326733b972575849d128205c598769e50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5"} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382"} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1305195a18fc1646bc3fc3866cdb388326733b972575849d128205c598769e50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1305195a18fc1646bc3fc3866cdb388326733b972575849d128205c598769e50"} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1305195a18fc1646bc3fc3866cdb388326733b972575849d128205c598769e50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18476ab7b10ba3de26a77eb9bc206c937dbdc19da9ccc78853c87131bea82d20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18476ab7b10ba3de26a77eb9bc206c937dbdc19da9ccc78853c87131bea82d20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18476ab7b10ba3de26a77eb9bc206c937dbdc19da9ccc78853c87131bea82d20"} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5"} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1305195a18fc1646bc3fc3866cdb388326733b972575849d128205c598769e50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1305195a18fc1646bc3fc3866cdb388326733b972575849d128205c598769e50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382"} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1305195a18fc1646bc3fc3866cdb388326733b972575849d128205c598769e50"} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1305195a18fc1646bc3fc3866cdb388326733b972575849d128205c598769e50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18476ab7b10ba3de26a77eb9bc206c937dbdc19da9ccc78853c87131bea82d20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18476ab7b10ba3de26a77eb9bc206c937dbdc19da9ccc78853c87131bea82d20"} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5"} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d450776fd0c25463f4e44c451992b28ba29341d6e86bcdffb53c33ddcf05cbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d450776fd0c25463f4e44c451992b28ba29341d6e86bcdffb53c33ddcf05cbb"} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a45fc70f9578b4eb13298fa772891b2efa7d91e18742244634c38a519cc04a9f"} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1305195a18fc1646bc3fc3866cdb388326733b972575849d128205c598769e50"} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d450776fd0c25463f4e44c451992b28ba29341d6e86bcdffb53c33ddcf05cbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a45fc70f9578b4eb13298fa772891b2efa7d91e18742244634c38a519cc04a9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a45fc70f9578b4eb13298fa772891b2efa7d91e18742244634c38a519cc04a9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382"} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e516973076960256f315825b886d6a356a96e5049cbc02951b7cdd985a311f24"} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d450776fd0c25463f4e44c451992b28ba29341d6e86bcdffb53c33ddcf05cbb"} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a45fc70f9578b4eb13298fa772891b2efa7d91e18742244634c38a519cc04a9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1305195a18fc1646bc3fc3866cdb388326733b972575849d128205c598769e50","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18476ab7b10ba3de26a77eb9bc206c937dbdc19da9ccc78853c87131bea82d20","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18476ab7b10ba3de26a77eb9bc206c937dbdc19da9ccc78853c87131bea82d20"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a45fc70f9578b4eb13298fa772891b2efa7d91e18742244634c38a519cc04a9f"} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18476ab7b10ba3de26a77eb9bc206c937dbdc19da9ccc78853c87131bea82d20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e516973076960256f315825b886d6a356a96e5049cbc02951b7cdd985a311f24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e516973076960256f315825b886d6a356a96e5049cbc02951b7cdd985a311f24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18476ab7b10ba3de26a77eb9bc206c937dbdc19da9ccc78853c87131bea82d20"} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e516973076960256f315825b886d6a356a96e5049cbc02951b7cdd985a311f24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d450776fd0c25463f4e44c451992b28ba29341d6e86bcdffb53c33ddcf05cbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:51:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d450776fd0c25463f4e44c451992b28ba29341d6e86bcdffb53c33ddcf05cbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e516973076960256f315825b886d6a356a96e5049cbc02951b7cdd985a311f24"} {"level":"info","ts":"2026-07-16T00:51:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d450776fd0c25463f4e44c451992b28ba29341d6e86bcdffb53c33ddcf05cbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a45fc70f9578b4eb13298fa772891b2efa7d91e18742244634c38a519cc04a9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18476ab7b10ba3de26a77eb9bc206c937dbdc19da9ccc78853c87131bea82d20","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e516973076960256f315825b886d6a356a96e5049cbc02951b7cdd985a311f24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d450776fd0c25463f4e44c451992b28ba29341d6e86bcdffb53c33ddcf05cbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:51:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:51:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d450776fd0c25463f4e44c451992b28ba29341d6e86bcdffb53c33ddcf05cbb"} {"level":"info","ts":"2026-07-16T00:51:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d450776fd0c25463f4e44c451992b28ba29341d6e86bcdffb53c33ddcf05cbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d450776fd0c25463f4e44c451992b28ba29341d6e86bcdffb53c33ddcf05cbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d450776fd0c25463f4e44c451992b28ba29341d6e86bcdffb53c33ddcf05cbb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:51:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d450776fd0c25463f4e44c451992b28ba29341d6e86bcdffb53c33ddcf05cbb"} {"level":"debug","ts":"2026-07-16T00:51:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d450776fd0c25463f4e44c451992b28ba29341d6e86bcdffb53c33ddcf05cbb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:51:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:51:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d450776fd0c25463f4e44c451992b28ba29341d6e86bcdffb53c33ddcf05cbb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:51:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d450776fd0c25463f4e44c451992b28ba29341d6e86bcdffb53c33ddcf05cbb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:51:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d450776fd0c25463f4e44c451992b28ba29341d6e86bcdffb53c33ddcf05cbb","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:51:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d450776fd0c25463f4e44c451992b28ba29341d6e86bcdffb53c33ddcf05cbb"} {"level":"info","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b43a603d-11fc-44fb-8773-003ec4d332a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60776","PortSpecifier":{"PortValue":60776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b43a603d-11fc-44fb-8773-003ec4d332a5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b43a603d-11fc-44fb-8773-003ec4d332a5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60776","PortSpecifier":{"PortValue":60776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784163064,"nanos":268564399},"http":{"id":"b43a603d-11fc-44fb-8773-003ec4d332a5","method":"POST","headers":{":authority":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b43a603d-11fc-44fb-8773-003ec4d332a5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b43a603d-11fc-44fb-8773-003ec4d332a5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"]}} {"level":"debug","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b43a603d-11fc-44fb-8773-003ec4d332a5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4ec40d5195356941429f8fe254d568524a996761a39a727ffbd6d5fb44fd37a8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b43a603d-11fc-44fb-8773-003ec4d332a5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b43a603d-11fc-44fb-8773-003ec4d332a5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b43a603d-11fc-44fb-8773-003ec4d332a5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ee350/auth-test-model-7ee350\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7ee350/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b43a603d-11fc-44fb-8773-003ec4d332a5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b43a603d-11fc-44fb-8773-003ec4d332a5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b43a603d-11fc-44fb-8773-003ec4d332a5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b43a603d-11fc-44fb-8773-003ec4d332a5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b43a603d-11fc-44fb-8773-003ec4d332a5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9ab724e-d388-452c-addd-21ad2b24b4e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33840","PortSpecifier":{"PortValue":33840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d9ab724e-d388-452c-addd-21ad2b24b4e6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9ab724e-d388-452c-addd-21ad2b24b4e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33840","PortSpecifier":{"PortValue":33840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784163064,"nanos":335234557},"http":{"id":"d9ab724e-d388-452c-addd-21ad2b24b4e6","method":"POST","headers":{":authority":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d9ab724e-d388-452c-addd-21ad2b24b4e6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d9ab724e-d388-452c-addd-21ad2b24b4e6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"]}} {"level":"debug","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d9ab724e-d388-452c-addd-21ad2b24b4e6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e516973076960256f315825b886d6a356a96e5049cbc02951b7cdd985a311f24"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9ab724e-d388-452c-addd-21ad2b24b4e6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9ab724e-d388-452c-addd-21ad2b24b4e6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9ab724e-d388-452c-addd-21ad2b24b4e6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-07a8dc/auth-test-model-07a8dc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-07a8dc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d9ab724e-d388-452c-addd-21ad2b24b4e6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9ab724e-d388-452c-addd-21ad2b24b4e6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9ab724e-d388-452c-addd-21ad2b24b4e6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9ab724e-d388-452c-addd-21ad2b24b4e6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9ab724e-d388-452c-addd-21ad2b24b4e6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9ce2033-e582-45f0-ac07-aec04878c5a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60788","PortSpecifier":{"PortValue":60788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b9ce2033-e582-45f0-ac07-aec04878c5a1","method":"GET","path":"/maas-api/v1/api-keys/67460f7d-92cf-44fe-8d1b-80c16e12706d","host":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9ce2033-e582-45f0-ac07-aec04878c5a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60788","PortSpecifier":{"PortValue":60788}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784163064,"nanos":408134492},"http":{"id":"b9ce2033-e582-45f0-ac07-aec04878c5a1","method":"GET","headers":{":authority":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/67460f7d-92cf-44fe-8d1b-80c16e12706d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b9ce2033-e582-45f0-ac07-aec04878c5a1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b9ce2033-e582-45f0-ac07-aec04878c5a1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"]}} {"level":"debug","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b9ce2033-e582-45f0-ac07-aec04878c5a1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4ec40d5195356941429f8fe254d568524a996761a39a727ffbd6d5fb44fd37a8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/67460f7d-92cf-44fe-8d1b-80c16e12706d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9ce2033-e582-45f0-ac07-aec04878c5a1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9ce2033-e582-45f0-ac07-aec04878c5a1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9ce2033-e582-45f0-ac07-aec04878c5a1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ee350/auth-test-model-7ee350\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7ee350/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b9ce2033-e582-45f0-ac07-aec04878c5a1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9ce2033-e582-45f0-ac07-aec04878c5a1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9ce2033-e582-45f0-ac07-aec04878c5a1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9ce2033-e582-45f0-ac07-aec04878c5a1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9ce2033-e582-45f0-ac07-aec04878c5a1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56fe2f6a-56f8-4170-84d3-e858816baef0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33844","PortSpecifier":{"PortValue":33844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"56fe2f6a-56f8-4170-84d3-e858816baef0","method":"GET","path":"/maas-api/v1/api-keys/64dba6e8-924a-4949-9e7d-39815de1bc5a","host":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56fe2f6a-56f8-4170-84d3-e858816baef0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33844","PortSpecifier":{"PortValue":33844}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784163064,"nanos":444715617},"http":{"id":"56fe2f6a-56f8-4170-84d3-e858816baef0","method":"GET","headers":{":authority":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/64dba6e8-924a-4949-9e7d-39815de1bc5a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"56fe2f6a-56f8-4170-84d3-e858816baef0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"56fe2f6a-56f8-4170-84d3-e858816baef0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"]}} {"level":"debug","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"56fe2f6a-56f8-4170-84d3-e858816baef0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e516973076960256f315825b886d6a356a96e5049cbc02951b7cdd985a311f24"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/64dba6e8-924a-4949-9e7d-39815de1bc5a",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56fe2f6a-56f8-4170-84d3-e858816baef0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56fe2f6a-56f8-4170-84d3-e858816baef0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56fe2f6a-56f8-4170-84d3-e858816baef0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-07a8dc/auth-test-model-07a8dc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-07a8dc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"56fe2f6a-56f8-4170-84d3-e858816baef0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56fe2f6a-56f8-4170-84d3-e858816baef0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56fe2f6a-56f8-4170-84d3-e858816baef0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56fe2f6a-56f8-4170-84d3-e858816baef0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T00:51:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56fe2f6a-56f8-4170-84d3-e858816baef0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T00:51:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1de27496-b813-4126-b841-3b187be5226d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39534","PortSpecifier":{"PortValue":39534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1de27496-b813-4126-b841-3b187be5226d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T00:51:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1de27496-b813-4126-b841-3b187be5226d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39534","PortSpecifier":{"PortValue":39534}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784163086,"nanos":87075107},"http":{"id":"1de27496-b813-4126-b841-3b187be5226d","method":"POST","headers":{":authority":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:51:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1de27496-b813-4126-b841-3b187be5226d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T00:51:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1de27496-b813-4126-b841-3b187be5226d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"]}} {"level":"debug","ts":"2026-07-16T00:51:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1de27496-b813-4126-b841-3b187be5226d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4ec40d5195356941429f8fe254d568524a996761a39a727ffbd6d5fb44fd37a8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:51:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1de27496-b813-4126-b841-3b187be5226d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:51:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1de27496-b813-4126-b841-3b187be5226d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:51:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1de27496-b813-4126-b841-3b187be5226d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ee350/auth-test-model-7ee350\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7ee350/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:51:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1de27496-b813-4126-b841-3b187be5226d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T00:51:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1de27496-b813-4126-b841-3b187be5226d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T00:51:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1de27496-b813-4126-b841-3b187be5226d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T00:51:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1de27496-b813-4126-b841-3b187be5226d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T00:51:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1de27496-b813-4126-b841-3b187be5226d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T00:51:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ad15b13-8e2d-4902-81ce-2f264b71652f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53938","PortSpecifier":{"PortValue":53938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6ad15b13-8e2d-4902-81ce-2f264b71652f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T00:51:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ad15b13-8e2d-4902-81ce-2f264b71652f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:53938","PortSpecifier":{"PortValue":53938}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784163086,"nanos":128871254},"http":{"id":"6ad15b13-8e2d-4902-81ce-2f264b71652f","method":"POST","headers":{":authority":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:51:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6ad15b13-8e2d-4902-81ce-2f264b71652f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T00:51:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6ad15b13-8e2d-4902-81ce-2f264b71652f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"]}} {"level":"debug","ts":"2026-07-16T00:51:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6ad15b13-8e2d-4902-81ce-2f264b71652f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e516973076960256f315825b886d6a356a96e5049cbc02951b7cdd985a311f24"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:51:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ad15b13-8e2d-4902-81ce-2f264b71652f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:51:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ad15b13-8e2d-4902-81ce-2f264b71652f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:51:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ad15b13-8e2d-4902-81ce-2f264b71652f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-07a8dc/auth-test-model-07a8dc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-07a8dc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:51:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6ad15b13-8e2d-4902-81ce-2f264b71652f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T00:51:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ad15b13-8e2d-4902-81ce-2f264b71652f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T00:51:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ad15b13-8e2d-4902-81ce-2f264b71652f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T00:51:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ad15b13-8e2d-4902-81ce-2f264b71652f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T00:51:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ad15b13-8e2d-4902-81ce-2f264b71652f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T00:51:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a10e920-3f7e-40ef-aa88-b5f89c48c834","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39536","PortSpecifier":{"PortValue":39536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0a10e920-3f7e-40ef-aa88-b5f89c48c834","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T00:51:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0a10e920-3f7e-40ef-aa88-b5f89c48c834","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39536","PortSpecifier":{"PortValue":39536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784163086,"nanos":167524381},"http":{"id":"0a10e920-3f7e-40ef-aa88-b5f89c48c834","method":"GET","headers":{":authority":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:51:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0a10e920-3f7e-40ef-aa88-b5f89c48c834","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Ie9422UzfUqU4VHb_9aDHRvOlegbjxn8H0gJ3Xzy78mq7GkVlboN3sBvVDQb"} {"level":"debug","ts":"2026-07-16T00:51:26Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0a10e920-3f7e-40ef-aa88-b5f89c48c834","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7ee350.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Ie9422UzfUqU4VHb_9aDHRvOlegbjxn8H0gJ3Xzy78mq7GkVlboN3sBvVDQb\"}"} {"level":"debug","ts":"2026-07-16T00:51:26Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0a10e920-3f7e-40ef-aa88-b5f89c48c834","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7ee350.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2c218c82-8fce-475a-b3b3-169fcf4f8776","keyName":"e2e-auth-iso-a-2bd2b4","subscription":"e2e-auth-iso-a1bb94","tenant":"e2e-shared-a-7ee350","userId":"2c218c82-8fce-475a-b3b3-169fcf4f8776","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T00:51:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0a10e920-3f7e-40ef-aa88-b5f89c48c834","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:51:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a10e920-3f7e-40ef-aa88-b5f89c48c834","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:51:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a10e920-3f7e-40ef-aa88-b5f89c48c834","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:51:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0a10e920-3f7e-40ef-aa88-b5f89c48c834","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ee350/auth-test-model-7ee350\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7ee350/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:51:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a10e920-3f7e-40ef-aa88-b5f89c48c834","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T00:51:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0a10e920-3f7e-40ef-aa88-b5f89c48c834","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-16T00:51:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a10e920-3f7e-40ef-aa88-b5f89c48c834","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-a1bb94"} {"level":"debug","ts":"2026-07-16T00:51:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0a10e920-3f7e-40ef-aa88-b5f89c48c834","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T00:51:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a10e920-3f7e-40ef-aa88-b5f89c48c834","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T00:51:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0a10e920-3f7e-40ef-aa88-b5f89c48c834","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T00:51:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"637c9498-1cb0-4d30-9d57-9ea1de7e3f24","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47740","PortSpecifier":{"PortValue":47740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"637c9498-1cb0-4d30-9d57-9ea1de7e3f24","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T00:51:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"637c9498-1cb0-4d30-9d57-9ea1de7e3f24","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:47740","PortSpecifier":{"PortValue":47740}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784163103,"nanos":440590492},"http":{"id":"637c9498-1cb0-4d30-9d57-9ea1de7e3f24","method":"POST","headers":{":authority":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:51:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"637c9498-1cb0-4d30-9d57-9ea1de7e3f24","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T00:51:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"637c9498-1cb0-4d30-9d57-9ea1de7e3f24","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"]}} {"level":"debug","ts":"2026-07-16T00:51:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"637c9498-1cb0-4d30-9d57-9ea1de7e3f24","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4ec40d5195356941429f8fe254d568524a996761a39a727ffbd6d5fb44fd37a8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:51:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"637c9498-1cb0-4d30-9d57-9ea1de7e3f24","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:51:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"637c9498-1cb0-4d30-9d57-9ea1de7e3f24","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:51:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"637c9498-1cb0-4d30-9d57-9ea1de7e3f24","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ee350/auth-test-model-7ee350\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7ee350/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:51:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"637c9498-1cb0-4d30-9d57-9ea1de7e3f24","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T00:51:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"637c9498-1cb0-4d30-9d57-9ea1de7e3f24","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T00:51:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"637c9498-1cb0-4d30-9d57-9ea1de7e3f24","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T00:51:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"637c9498-1cb0-4d30-9d57-9ea1de7e3f24","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T00:51:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"637c9498-1cb0-4d30-9d57-9ea1de7e3f24","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T00:51:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"51ebeb13-5972-4f67-aeea-0a1295711bd5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38146","PortSpecifier":{"PortValue":38146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"51ebeb13-5972-4f67-aeea-0a1295711bd5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T00:51:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"51ebeb13-5972-4f67-aeea-0a1295711bd5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38146","PortSpecifier":{"PortValue":38146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784163103,"nanos":486249232},"http":{"id":"51ebeb13-5972-4f67-aeea-0a1295711bd5","method":"POST","headers":{":authority":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:51:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"51ebeb13-5972-4f67-aeea-0a1295711bd5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T00:51:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"51ebeb13-5972-4f67-aeea-0a1295711bd5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"]}} {"level":"debug","ts":"2026-07-16T00:51:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"51ebeb13-5972-4f67-aeea-0a1295711bd5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e516973076960256f315825b886d6a356a96e5049cbc02951b7cdd985a311f24"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:51:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51ebeb13-5972-4f67-aeea-0a1295711bd5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:51:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51ebeb13-5972-4f67-aeea-0a1295711bd5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:51:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51ebeb13-5972-4f67-aeea-0a1295711bd5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-07a8dc/auth-test-model-07a8dc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-07a8dc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:51:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"51ebeb13-5972-4f67-aeea-0a1295711bd5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T00:51:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51ebeb13-5972-4f67-aeea-0a1295711bd5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T00:51:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51ebeb13-5972-4f67-aeea-0a1295711bd5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T00:51:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"51ebeb13-5972-4f67-aeea-0a1295711bd5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T00:51:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"51ebeb13-5972-4f67-aeea-0a1295711bd5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T00:51:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"204068a1-748a-4f8d-8c87-4ba9e8ccba02","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38152","PortSpecifier":{"PortValue":38152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"204068a1-748a-4f8d-8c87-4ba9e8ccba02","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T00:51:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"204068a1-748a-4f8d-8c87-4ba9e8ccba02","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38152","PortSpecifier":{"PortValue":38152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784163103,"nanos":529237507},"http":{"id":"204068a1-748a-4f8d-8c87-4ba9e8ccba02","method":"GET","headers":{":authority":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:51:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"204068a1-748a-4f8d-8c87-4ba9e8ccba02","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-u1GURa7rRL1SXSZm_ZQ1Ewto3c8KcsxJrpBnk6vxcDLYrZ2rjW8TCiugAYLP"} {"level":"debug","ts":"2026-07-16T00:51:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"204068a1-748a-4f8d-8c87-4ba9e8ccba02","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-07a8dc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-u1GURa7rRL1SXSZm_ZQ1Ewto3c8KcsxJrpBnk6vxcDLYrZ2rjW8TCiugAYLP\"}"} {"level":"debug","ts":"2026-07-16T00:51:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"204068a1-748a-4f8d-8c87-4ba9e8ccba02","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-07a8dc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-16T00:51:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"204068a1-748a-4f8d-8c87-4ba9e8ccba02","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"e516973076960256f315825b886d6a356a96e5049cbc02951b7cdd985a311f24"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:51:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"204068a1-748a-4f8d-8c87-4ba9e8ccba02","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:51:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"204068a1-748a-4f8d-8c87-4ba9e8ccba02","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-16T00:51:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"204068a1-748a-4f8d-8c87-4ba9e8ccba02","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-16T00:51:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"204068a1-748a-4f8d-8c87-4ba9e8ccba02","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"317aee93-67e7-9a77-b9ce-4e1631755f82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54256","PortSpecifier":{"PortValue":54256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"317aee93-67e7-9a77-b9ce-4e1631755f82","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"317aee93-67e7-9a77-b9ce-4e1631755f82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54256","PortSpecifier":{"PortValue":54256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784163125,"nanos":58053020},"http":{"id":"317aee93-67e7-9a77-b9ce-4e1631755f82","method":"POST","headers":{":authority":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"317aee93-67e7-9a77-b9ce-4e1631755f82","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"317aee93-67e7-9a77-b9ce-4e1631755f82","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"]}} {"level":"debug","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"317aee93-67e7-9a77-b9ce-4e1631755f82","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4ec40d5195356941429f8fe254d568524a996761a39a727ffbd6d5fb44fd37a8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"317aee93-67e7-9a77-b9ce-4e1631755f82","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"317aee93-67e7-9a77-b9ce-4e1631755f82","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"317aee93-67e7-9a77-b9ce-4e1631755f82","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ee350/auth-test-model-7ee350\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7ee350/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"317aee93-67e7-9a77-b9ce-4e1631755f82","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"317aee93-67e7-9a77-b9ce-4e1631755f82","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"317aee93-67e7-9a77-b9ce-4e1631755f82","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"317aee93-67e7-9a77-b9ce-4e1631755f82","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"317aee93-67e7-9a77-b9ce-4e1631755f82","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e5f94ec-c8fc-4ce9-aa22-2e5fcdb80452","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40996","PortSpecifier":{"PortValue":40996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2e5f94ec-c8fc-4ce9-aa22-2e5fcdb80452","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e5f94ec-c8fc-4ce9-aa22-2e5fcdb80452","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:40996","PortSpecifier":{"PortValue":40996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784163125,"nanos":101808898},"http":{"id":"2e5f94ec-c8fc-4ce9-aa22-2e5fcdb80452","method":"POST","headers":{":authority":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2e5f94ec-c8fc-4ce9-aa22-2e5fcdb80452","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2e5f94ec-c8fc-4ce9-aa22-2e5fcdb80452","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"]}} {"level":"debug","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2e5f94ec-c8fc-4ce9-aa22-2e5fcdb80452","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e516973076960256f315825b886d6a356a96e5049cbc02951b7cdd985a311f24"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e5f94ec-c8fc-4ce9-aa22-2e5fcdb80452","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e5f94ec-c8fc-4ce9-aa22-2e5fcdb80452","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e5f94ec-c8fc-4ce9-aa22-2e5fcdb80452","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-07a8dc/auth-test-model-07a8dc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-07a8dc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2e5f94ec-c8fc-4ce9-aa22-2e5fcdb80452","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e5f94ec-c8fc-4ce9-aa22-2e5fcdb80452","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e5f94ec-c8fc-4ce9-aa22-2e5fcdb80452","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e5f94ec-c8fc-4ce9-aa22-2e5fcdb80452","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e5f94ec-c8fc-4ce9-aa22-2e5fcdb80452","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"677c75a3-1732-492b-a7a7-f7bc93b90e85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54266","PortSpecifier":{"PortValue":54266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"677c75a3-1732-492b-a7a7-f7bc93b90e85","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"677c75a3-1732-492b-a7a7-f7bc93b90e85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:54266","PortSpecifier":{"PortValue":54266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784163125,"nanos":142402327},"http":{"id":"677c75a3-1732-492b-a7a7-f7bc93b90e85","method":"POST","headers":{":authority":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"677c75a3-1732-492b-a7a7-f7bc93b90e85","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"677c75a3-1732-492b-a7a7-f7bc93b90e85","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"]}} {"level":"debug","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"677c75a3-1732-492b-a7a7-f7bc93b90e85","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4ec40d5195356941429f8fe254d568524a996761a39a727ffbd6d5fb44fd37a8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"677c75a3-1732-492b-a7a7-f7bc93b90e85","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"677c75a3-1732-492b-a7a7-f7bc93b90e85","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"677c75a3-1732-492b-a7a7-f7bc93b90e85","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ee350/auth-test-model-7ee350\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7ee350/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"677c75a3-1732-492b-a7a7-f7bc93b90e85","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"677c75a3-1732-492b-a7a7-f7bc93b90e85","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"677c75a3-1732-492b-a7a7-f7bc93b90e85","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"677c75a3-1732-492b-a7a7-f7bc93b90e85","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"677c75a3-1732-492b-a7a7-f7bc93b90e85","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07c6a512-bd98-46ad-9464-a7098a059fdd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41008","PortSpecifier":{"PortValue":41008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"07c6a512-bd98-46ad-9464-a7098a059fdd","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"07c6a512-bd98-46ad-9464-a7098a059fdd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:41008","PortSpecifier":{"PortValue":41008}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784163125,"nanos":183142845},"http":{"id":"07c6a512-bd98-46ad-9464-a7098a059fdd","method":"POST","headers":{":authority":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"07c6a512-bd98-46ad-9464-a7098a059fdd","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"07c6a512-bd98-46ad-9464-a7098a059fdd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"]}} {"level":"debug","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"07c6a512-bd98-46ad-9464-a7098a059fdd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e516973076960256f315825b886d6a356a96e5049cbc02951b7cdd985a311f24"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07c6a512-bd98-46ad-9464-a7098a059fdd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07c6a512-bd98-46ad-9464-a7098a059fdd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"07c6a512-bd98-46ad-9464-a7098a059fdd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-07a8dc/auth-test-model-07a8dc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-07a8dc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"07c6a512-bd98-46ad-9464-a7098a059fdd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07c6a512-bd98-46ad-9464-a7098a059fdd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"07c6a512-bd98-46ad-9464-a7098a059fdd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07c6a512-bd98-46ad-9464-a7098a059fdd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T00:52:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"07c6a512-bd98-46ad-9464-a7098a059fdd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27c97be5-5bd7-4466-8554-3912e49b099a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33240","PortSpecifier":{"PortValue":33240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"27c97be5-5bd7-4466-8554-3912e49b099a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27c97be5-5bd7-4466-8554-3912e49b099a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33240","PortSpecifier":{"PortValue":33240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784163146,"nanos":629024193},"http":{"id":"27c97be5-5bd7-4466-8554-3912e49b099a","method":"POST","headers":{":authority":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"27c97be5-5bd7-4466-8554-3912e49b099a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"27c97be5-5bd7-4466-8554-3912e49b099a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"]}} {"level":"debug","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"27c97be5-5bd7-4466-8554-3912e49b099a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4ec40d5195356941429f8fe254d568524a996761a39a727ffbd6d5fb44fd37a8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27c97be5-5bd7-4466-8554-3912e49b099a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27c97be5-5bd7-4466-8554-3912e49b099a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27c97be5-5bd7-4466-8554-3912e49b099a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ee350/auth-test-model-7ee350\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7ee350/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"27c97be5-5bd7-4466-8554-3912e49b099a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27c97be5-5bd7-4466-8554-3912e49b099a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27c97be5-5bd7-4466-8554-3912e49b099a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27c97be5-5bd7-4466-8554-3912e49b099a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27c97be5-5bd7-4466-8554-3912e49b099a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e1a2df4-d3c0-4007-83a7-f93d74f70189","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43090","PortSpecifier":{"PortValue":43090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0e1a2df4-d3c0-4007-83a7-f93d74f70189","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e1a2df4-d3c0-4007-83a7-f93d74f70189","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43090","PortSpecifier":{"PortValue":43090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784163146,"nanos":678847108},"http":{"id":"0e1a2df4-d3c0-4007-83a7-f93d74f70189","method":"POST","headers":{":authority":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0e1a2df4-d3c0-4007-83a7-f93d74f70189","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0e1a2df4-d3c0-4007-83a7-f93d74f70189","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"]}} {"level":"debug","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0e1a2df4-d3c0-4007-83a7-f93d74f70189","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e516973076960256f315825b886d6a356a96e5049cbc02951b7cdd985a311f24"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e1a2df4-d3c0-4007-83a7-f93d74f70189","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e1a2df4-d3c0-4007-83a7-f93d74f70189","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e1a2df4-d3c0-4007-83a7-f93d74f70189","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-07a8dc/auth-test-model-07a8dc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-07a8dc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0e1a2df4-d3c0-4007-83a7-f93d74f70189","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e1a2df4-d3c0-4007-83a7-f93d74f70189","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e1a2df4-d3c0-4007-83a7-f93d74f70189","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e1a2df4-d3c0-4007-83a7-f93d74f70189","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e1a2df4-d3c0-4007-83a7-f93d74f70189","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60d46d9a-a0ac-4942-85c8-e8a9050efe38","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43094","PortSpecifier":{"PortValue":43094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"60d46d9a-a0ac-4942-85c8-e8a9050efe38","method":"GET","path":"/maas-api/v1/api-keys/588ee2de-ee41-4bf6-a4cc-47eca4c3ab73","host":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60d46d9a-a0ac-4942-85c8-e8a9050efe38","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:43094","PortSpecifier":{"PortValue":43094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784163146,"nanos":716866354},"http":{"id":"60d46d9a-a0ac-4942-85c8-e8a9050efe38","method":"GET","headers":{":authority":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/588ee2de-ee41-4bf6-a4cc-47eca4c3ab73",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"60d46d9a-a0ac-4942-85c8-e8a9050efe38","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"60d46d9a-a0ac-4942-85c8-e8a9050efe38","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"]}} {"level":"debug","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"60d46d9a-a0ac-4942-85c8-e8a9050efe38","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e516973076960256f315825b886d6a356a96e5049cbc02951b7cdd985a311f24"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/588ee2de-ee41-4bf6-a4cc-47eca4c3ab73",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60d46d9a-a0ac-4942-85c8-e8a9050efe38","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60d46d9a-a0ac-4942-85c8-e8a9050efe38","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60d46d9a-a0ac-4942-85c8-e8a9050efe38","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-07a8dc/auth-test-model-07a8dc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-07a8dc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"60d46d9a-a0ac-4942-85c8-e8a9050efe38","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60d46d9a-a0ac-4942-85c8-e8a9050efe38","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60d46d9a-a0ac-4942-85c8-e8a9050efe38","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60d46d9a-a0ac-4942-85c8-e8a9050efe38","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60d46d9a-a0ac-4942-85c8-e8a9050efe38","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec9edc0d-7e7a-4b15-85a4-e67687ef6123","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33246","PortSpecifier":{"PortValue":33246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ec9edc0d-7e7a-4b15-85a4-e67687ef6123","method":"GET","path":"/maas-api/v1/api-keys/588ee2de-ee41-4bf6-a4cc-47eca4c3ab73","host":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec9edc0d-7e7a-4b15-85a4-e67687ef6123","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:33246","PortSpecifier":{"PortValue":33246}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784163146,"nanos":751720318},"http":{"id":"ec9edc0d-7e7a-4b15-85a4-e67687ef6123","method":"GET","headers":{":authority":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/588ee2de-ee41-4bf6-a4cc-47eca4c3ab73",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ec9edc0d-7e7a-4b15-85a4-e67687ef6123","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ec9edc0d-7e7a-4b15-85a4-e67687ef6123","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"]}} {"level":"debug","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ec9edc0d-7e7a-4b15-85a4-e67687ef6123","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4ec40d5195356941429f8fe254d568524a996761a39a727ffbd6d5fb44fd37a8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/588ee2de-ee41-4bf6-a4cc-47eca4c3ab73",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec9edc0d-7e7a-4b15-85a4-e67687ef6123","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec9edc0d-7e7a-4b15-85a4-e67687ef6123","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec9edc0d-7e7a-4b15-85a4-e67687ef6123","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ee350/auth-test-model-7ee350\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7ee350/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ec9edc0d-7e7a-4b15-85a4-e67687ef6123","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec9edc0d-7e7a-4b15-85a4-e67687ef6123","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec9edc0d-7e7a-4b15-85a4-e67687ef6123","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec9edc0d-7e7a-4b15-85a4-e67687ef6123","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T00:52:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec9edc0d-7e7a-4b15-85a4-e67687ef6123","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T00:52:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"850184c6-b666-4eaa-8bf6-da4f87b49a33","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34088","PortSpecifier":{"PortValue":34088}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"850184c6-b666-4eaa-8bf6-da4f87b49a33","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T00:52:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"850184c6-b666-4eaa-8bf6-da4f87b49a33","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34088","PortSpecifier":{"PortValue":34088}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784163166,"nanos":101006173},"http":{"id":"850184c6-b666-4eaa-8bf6-da4f87b49a33","method":"POST","headers":{":authority":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:52:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"850184c6-b666-4eaa-8bf6-da4f87b49a33","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T00:52:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"850184c6-b666-4eaa-8bf6-da4f87b49a33","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"]}} {"level":"debug","ts":"2026-07-16T00:52:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"850184c6-b666-4eaa-8bf6-da4f87b49a33","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4ec40d5195356941429f8fe254d568524a996761a39a727ffbd6d5fb44fd37a8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:52:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"850184c6-b666-4eaa-8bf6-da4f87b49a33","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:52:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"850184c6-b666-4eaa-8bf6-da4f87b49a33","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:52:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"850184c6-b666-4eaa-8bf6-da4f87b49a33","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ee350/auth-test-model-7ee350\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7ee350/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:52:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"850184c6-b666-4eaa-8bf6-da4f87b49a33","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T00:52:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"850184c6-b666-4eaa-8bf6-da4f87b49a33","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T00:52:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"850184c6-b666-4eaa-8bf6-da4f87b49a33","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T00:52:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"850184c6-b666-4eaa-8bf6-da4f87b49a33","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T00:52:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"850184c6-b666-4eaa-8bf6-da4f87b49a33","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T00:52:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"10c2a08f-c7c9-491f-b4d7-3e072d9ddbb3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51996","PortSpecifier":{"PortValue":51996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"10c2a08f-c7c9-491f-b4d7-3e072d9ddbb3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T00:52:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"10c2a08f-c7c9-491f-b4d7-3e072d9ddbb3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:51996","PortSpecifier":{"PortValue":51996}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784163166,"nanos":140359281},"http":{"id":"10c2a08f-c7c9-491f-b4d7-3e072d9ddbb3","method":"POST","headers":{":authority":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:52:46Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"10c2a08f-c7c9-491f-b4d7-3e072d9ddbb3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T00:52:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"10c2a08f-c7c9-491f-b4d7-3e072d9ddbb3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"]}} {"level":"debug","ts":"2026-07-16T00:52:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"10c2a08f-c7c9-491f-b4d7-3e072d9ddbb3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e516973076960256f315825b886d6a356a96e5049cbc02951b7cdd985a311f24"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:52:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10c2a08f-c7c9-491f-b4d7-3e072d9ddbb3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:52:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10c2a08f-c7c9-491f-b4d7-3e072d9ddbb3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:52:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"10c2a08f-c7c9-491f-b4d7-3e072d9ddbb3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-07a8dc/auth-test-model-07a8dc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-07a8dc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:52:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"10c2a08f-c7c9-491f-b4d7-3e072d9ddbb3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T00:52:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10c2a08f-c7c9-491f-b4d7-3e072d9ddbb3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T00:52:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"10c2a08f-c7c9-491f-b4d7-3e072d9ddbb3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T00:52:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"10c2a08f-c7c9-491f-b4d7-3e072d9ddbb3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T00:52:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"10c2a08f-c7c9-491f-b4d7-3e072d9ddbb3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T00:52:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0442aaf9-d87d-4bc4-b2e7-acfa39fc2790","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34092","PortSpecifier":{"PortValue":34092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0442aaf9-d87d-4bc4-b2e7-acfa39fc2790","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T00:52:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0442aaf9-d87d-4bc4-b2e7-acfa39fc2790","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:34092","PortSpecifier":{"PortValue":34092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784163166,"nanos":177791169},"http":{"id":"0442aaf9-d87d-4bc4-b2e7-acfa39fc2790","method":"POST","headers":{":authority":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:52:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0442aaf9-d87d-4bc4-b2e7-acfa39fc2790","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-10AJI7BMcqdXLC5GB_eUuxxTIA3ahAyRQrlmpyugvwSs1u3OqJ47i7bzdSAZL"} {"level":"debug","ts":"2026-07-16T00:52:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0442aaf9-d87d-4bc4-b2e7-acfa39fc2790","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7ee350.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-10AJI7BMcqdXLC5GB_eUuxxTIA3ahAyRQrlmpyugvwSs1u3OqJ47i7bzdSAZL\"}"} {"level":"debug","ts":"2026-07-16T00:52:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0442aaf9-d87d-4bc4-b2e7-acfa39fc2790","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7ee350.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fe8e0037-9537-4516-afcd-752afd92ccca","keyName":"e2e-auth-iso-a-aa2f8e","subscription":"e2e-auth-iso-533cc6","tenant":"e2e-shared-a-7ee350","userId":"fe8e0037-9537-4516-afcd-752afd92ccca","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T00:52:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0442aaf9-d87d-4bc4-b2e7-acfa39fc2790","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:52:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0442aaf9-d87d-4bc4-b2e7-acfa39fc2790","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:52:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0442aaf9-d87d-4bc4-b2e7-acfa39fc2790","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:52:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0442aaf9-d87d-4bc4-b2e7-acfa39fc2790","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ee350/auth-test-model-7ee350\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7ee350/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:52:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0442aaf9-d87d-4bc4-b2e7-acfa39fc2790","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T00:52:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0442aaf9-d87d-4bc4-b2e7-acfa39fc2790","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-533cc6"} {"level":"debug","ts":"2026-07-16T00:52:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0442aaf9-d87d-4bc4-b2e7-acfa39fc2790","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T00:52:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0442aaf9-d87d-4bc4-b2e7-acfa39fc2790","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-16T00:52:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0442aaf9-d87d-4bc4-b2e7-acfa39fc2790","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T00:52:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0442aaf9-d87d-4bc4-b2e7-acfa39fc2790","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T00:52:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/935db587c5eff86f8258459c06d592ec0d937274c43a78b5ae097a3458880189"} {"level":"info","ts":"2026-07-16T00:52:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/097a2c948457da43304619bcbe6a8e0954b46e9a496d42b6a17e7bed5cb0f710"} {"level":"info","ts":"2026-07-16T00:52:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a45fc70f9578b4eb13298fa772891b2efa7d91e18742244634c38a519cc04a9f"} {"level":"info","ts":"2026-07-16T00:52:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d2bebcd10c951698ac82906ad25901e59153d3fd7c8bbd59e80b83bf6a1bdae6"} {"level":"info","ts":"2026-07-16T00:52:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b39147baee9536afebb73b1addb9d56b75345529e3c8d84ab6b67da78d4120c"} {"level":"info","ts":"2026-07-16T00:52:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/204eb8a47d2c7abc64c86af10bf13a2acaac035e57ed6941698522373e27f3fb"} {"level":"info","ts":"2026-07-16T00:52:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18476ab7b10ba3de26a77eb9bc206c937dbdc19da9ccc78853c87131bea82d20"} {"level":"info","ts":"2026-07-16T00:52:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/abca3197496ee834925bcaaca9b52d9e053c609779928bfec5ffc1347be8af16"} {"level":"info","ts":"2026-07-16T00:52:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d450776fd0c25463f4e44c451992b28ba29341d6e86bcdffb53c33ddcf05cbb"} {"level":"info","ts":"2026-07-16T00:52:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1305195a18fc1646bc3fc3866cdb388326733b972575849d128205c598769e50"} {"level":"info","ts":"2026-07-16T00:52:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cbeaa6c132f6e912989ae3a422b5dfd20c370230afa8178a6c8d705dd626bb02"} {"level":"info","ts":"2026-07-16T00:52:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b59c85cf0f18e5d3067f9ce66dc946fb05fb507566d7d1772ef0948068da1858"} {"level":"info","ts":"2026-07-16T00:52:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/269d92cb6b70d694305df29e00a2f1a85f6a9858e27d91d04829c660a3706637"} {"level":"info","ts":"2026-07-16T00:52:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d968655d1fe2f245a31937d921d69d822c5b5b355034085130c7d7fe69bca32"} {"level":"info","ts":"2026-07-16T00:52:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0409e62f114fe20c68f8619954229e86bf8b07d6d009e951c39e9ad824487cb"} {"level":"info","ts":"2026-07-16T00:52:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c8445f78bdd7600415f58d20599fd5a974ab38018cd8eedf1e58ce9026c13499"} {"level":"debug","ts":"2026-07-16T00:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b2f12389ee25112a691054af659acd4f0ddda8e3bf03e359afb9f6c0bf57345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b2f12389ee25112a691054af659acd4f0ddda8e3bf03e359afb9f6c0bf57345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b2f12389ee25112a691054af659acd4f0ddda8e3bf03e359afb9f6c0bf57345","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b2f12389ee25112a691054af659acd4f0ddda8e3bf03e359afb9f6c0bf57345"} {"level":"debug","ts":"2026-07-16T00:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b2f12389ee25112a691054af659acd4f0ddda8e3bf03e359afb9f6c0bf57345","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b2f12389ee25112a691054af659acd4f0ddda8e3bf03e359afb9f6c0bf57345"} {"level":"debug","ts":"2026-07-16T00:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b2f12389ee25112a691054af659acd4f0ddda8e3bf03e359afb9f6c0bf57345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b2f12389ee25112a691054af659acd4f0ddda8e3bf03e359afb9f6c0bf57345"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b2f12389ee25112a691054af659acd4f0ddda8e3bf03e359afb9f6c0bf57345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b2f12389ee25112a691054af659acd4f0ddda8e3bf03e359afb9f6c0bf57345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b2f12389ee25112a691054af659acd4f0ddda8e3bf03e359afb9f6c0bf57345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b2f12389ee25112a691054af659acd4f0ddda8e3bf03e359afb9f6c0bf57345","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b2f12389ee25112a691054af659acd4f0ddda8e3bf03e359afb9f6c0bf57345"} {"level":"debug","ts":"2026-07-16T00:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b2f12389ee25112a691054af659acd4f0ddda8e3bf03e359afb9f6c0bf57345","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b2f12389ee25112a691054af659acd4f0ddda8e3bf03e359afb9f6c0bf57345"} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b2f12389ee25112a691054af659acd4f0ddda8e3bf03e359afb9f6c0bf57345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b2f12389ee25112a691054af659acd4f0ddda8e3bf03e359afb9f6c0bf57345"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b2f12389ee25112a691054af659acd4f0ddda8e3bf03e359afb9f6c0bf57345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b2f12389ee25112a691054af659acd4f0ddda8e3bf03e359afb9f6c0bf57345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b2f12389ee25112a691054af659acd4f0ddda8e3bf03e359afb9f6c0bf57345","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b2f12389ee25112a691054af659acd4f0ddda8e3bf03e359afb9f6c0bf57345"} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b2f12389ee25112a691054af659acd4f0ddda8e3bf03e359afb9f6c0bf57345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b2f12389ee25112a691054af659acd4f0ddda8e3bf03e359afb9f6c0bf57345","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b2f12389ee25112a691054af659acd4f0ddda8e3bf03e359afb9f6c0bf57345"} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b2f12389ee25112a691054af659acd4f0ddda8e3bf03e359afb9f6c0bf57345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b2f12389ee25112a691054af659acd4f0ddda8e3bf03e359afb9f6c0bf57345"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b2f12389ee25112a691054af659acd4f0ddda8e3bf03e359afb9f6c0bf57345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b2f12389ee25112a691054af659acd4f0ddda8e3bf03e359afb9f6c0bf57345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b2f12389ee25112a691054af659acd4f0ddda8e3bf03e359afb9f6c0bf57345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5bf47e406f51360906284069add60d790fada6b256f56139e23f6e7bb6ddbae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b2f12389ee25112a691054af659acd4f0ddda8e3bf03e359afb9f6c0bf57345"} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5bf47e406f51360906284069add60d790fada6b256f56139e23f6e7bb6ddbae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b2f12389ee25112a691054af659acd4f0ddda8e3bf03e359afb9f6c0bf57345","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b2f12389ee25112a691054af659acd4f0ddda8e3bf03e359afb9f6c0bf57345"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5bf47e406f51360906284069add60d790fada6b256f56139e23f6e7bb6ddbae"} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b2f12389ee25112a691054af659acd4f0ddda8e3bf03e359afb9f6c0bf57345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5bf47e406f51360906284069add60d790fada6b256f56139e23f6e7bb6ddbae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5bf47e406f51360906284069add60d790fada6b256f56139e23f6e7bb6ddbae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b2f12389ee25112a691054af659acd4f0ddda8e3bf03e359afb9f6c0bf57345"} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5bf47e406f51360906284069add60d790fada6b256f56139e23f6e7bb6ddbae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b2f12389ee25112a691054af659acd4f0ddda8e3bf03e359afb9f6c0bf57345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5bf47e406f51360906284069add60d790fada6b256f56139e23f6e7bb6ddbae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5bf47e406f51360906284069add60d790fada6b256f56139e23f6e7bb6ddbae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5bf47e406f51360906284069add60d790fada6b256f56139e23f6e7bb6ddbae"} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5bf47e406f51360906284069add60d790fada6b256f56139e23f6e7bb6ddbae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5bf47e406f51360906284069add60d790fada6b256f56139e23f6e7bb6ddbae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5bf47e406f51360906284069add60d790fada6b256f56139e23f6e7bb6ddbae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5bf47e406f51360906284069add60d790fada6b256f56139e23f6e7bb6ddbae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5bf47e406f51360906284069add60d790fada6b256f56139e23f6e7bb6ddbae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b2f12389ee25112a691054af659acd4f0ddda8e3bf03e359afb9f6c0bf57345"} {"level":"error","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c5bf47e406f51360906284069add60d790fada6b256f56139e23f6e7bb6ddbae","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c5bf47e406f51360906284069add60d790fada6b256f56139e23f6e7bb6ddbae\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5bf47e406f51360906284069add60d790fada6b256f56139e23f6e7bb6ddbae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5bf47e406f51360906284069add60d790fada6b256f56139e23f6e7bb6ddbae"} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5bf47e406f51360906284069add60d790fada6b256f56139e23f6e7bb6ddbae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7"} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5bf47e406f51360906284069add60d790fada6b256f56139e23f6e7bb6ddbae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5bf47e406f51360906284069add60d790fada6b256f56139e23f6e7bb6ddbae"} {"level":"error","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c5bf47e406f51360906284069add60d790fada6b256f56139e23f6e7bb6ddbae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c5bf47e406f51360906284069add60d790fada6b256f56139e23f6e7bb6ddbae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7"} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c5bf47e406f51360906284069add60d790fada6b256f56139e23f6e7bb6ddbae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5bf47e406f51360906284069add60d790fada6b256f56139e23f6e7bb6ddbae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7"} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5bf47e406f51360906284069add60d790fada6b256f56139e23f6e7bb6ddbae"} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7"} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7"} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7"} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c7d4993b9aec1370ead91927512ef0062d5835d923994b994526ba1d9cde521","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c7d4993b9aec1370ead91927512ef0062d5835d923994b994526ba1d9cde521","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c7d4993b9aec1370ead91927512ef0062d5835d923994b994526ba1d9cde521"} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c7d4993b9aec1370ead91927512ef0062d5835d923994b994526ba1d9cde521","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c7d4993b9aec1370ead91927512ef0062d5835d923994b994526ba1d9cde521"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7"} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c7d4993b9aec1370ead91927512ef0062d5835d923994b994526ba1d9cde521","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c7d4993b9aec1370ead91927512ef0062d5835d923994b994526ba1d9cde521","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c7d4993b9aec1370ead91927512ef0062d5835d923994b994526ba1d9cde521"} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c7d4993b9aec1370ead91927512ef0062d5835d923994b994526ba1d9cde521","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7"} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c7d4993b9aec1370ead91927512ef0062d5835d923994b994526ba1d9cde521","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c7d4993b9aec1370ead91927512ef0062d5835d923994b994526ba1d9cde521","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c7d4993b9aec1370ead91927512ef0062d5835d923994b994526ba1d9cde521"} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d5442017acfd3df43e24b024caa649773d9f2c11f3891d291e8338d824998d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c7d4993b9aec1370ead91927512ef0062d5835d923994b994526ba1d9cde521"} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d5442017acfd3df43e24b024caa649773d9f2c11f3891d291e8338d824998d7"} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d5442017acfd3df43e24b024caa649773d9f2c11f3891d291e8338d824998d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c7d4993b9aec1370ead91927512ef0062d5835d923994b994526ba1d9cde521","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c7d4993b9aec1370ead91927512ef0062d5835d923994b994526ba1d9cde521"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d5442017acfd3df43e24b024caa649773d9f2c11f3891d291e8338d824998d7"} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c7d4993b9aec1370ead91927512ef0062d5835d923994b994526ba1d9cde521","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d5442017acfd3df43e24b024caa649773d9f2c11f3891d291e8338d824998d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d5442017acfd3df43e24b024caa649773d9f2c11f3891d291e8338d824998d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c7d4993b9aec1370ead91927512ef0062d5835d923994b994526ba1d9cde521"} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d5442017acfd3df43e24b024caa649773d9f2c11f3891d291e8338d824998d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c7d4993b9aec1370ead91927512ef0062d5835d923994b994526ba1d9cde521","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d5442017acfd3df43e24b024caa649773d9f2c11f3891d291e8338d824998d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d5442017acfd3df43e24b024caa649773d9f2c11f3891d291e8338d824998d7"} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d5442017acfd3df43e24b024caa649773d9f2c11f3891d291e8338d824998d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d5442017acfd3df43e24b024caa649773d9f2c11f3891d291e8338d824998d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d5442017acfd3df43e24b024caa649773d9f2c11f3891d291e8338d824998d7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d5442017acfd3df43e24b024caa649773d9f2c11f3891d291e8338d824998d7"} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d5442017acfd3df43e24b024caa649773d9f2c11f3891d291e8338d824998d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d5442017acfd3df43e24b024caa649773d9f2c11f3891d291e8338d824998d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d5442017acfd3df43e24b024caa649773d9f2c11f3891d291e8338d824998d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b67df6a5f797a58082d920aea9862c86467379edccd7a64e6d3cb9ec99f19776","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b67df6a5f797a58082d920aea9862c86467379edccd7a64e6d3cb9ec99f19776"} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b67df6a5f797a58082d920aea9862c86467379edccd7a64e6d3cb9ec99f19776","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d5442017acfd3df43e24b024caa649773d9f2c11f3891d291e8338d824998d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d5442017acfd3df43e24b024caa649773d9f2c11f3891d291e8338d824998d7"} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d5442017acfd3df43e24b024caa649773d9f2c11f3891d291e8338d824998d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b67df6a5f797a58082d920aea9862c86467379edccd7a64e6d3cb9ec99f19776","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d5442017acfd3df43e24b024caa649773d9f2c11f3891d291e8338d824998d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d5442017acfd3df43e24b024caa649773d9f2c11f3891d291e8338d824998d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d5442017acfd3df43e24b024caa649773d9f2c11f3891d291e8338d824998d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b67df6a5f797a58082d920aea9862c86467379edccd7a64e6d3cb9ec99f19776","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d5442017acfd3df43e24b024caa649773d9f2c11f3891d291e8338d824998d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d5442017acfd3df43e24b024caa649773d9f2c11f3891d291e8338d824998d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b67df6a5f797a58082d920aea9862c86467379edccd7a64e6d3cb9ec99f19776"} {"level":"error","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7d5442017acfd3df43e24b024caa649773d9f2c11f3891d291e8338d824998d7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7d5442017acfd3df43e24b024caa649773d9f2c11f3891d291e8338d824998d7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d5442017acfd3df43e24b024caa649773d9f2c11f3891d291e8338d824998d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d5442017acfd3df43e24b024caa649773d9f2c11f3891d291e8338d824998d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b67df6a5f797a58082d920aea9862c86467379edccd7a64e6d3cb9ec99f19776","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b67df6a5f797a58082d920aea9862c86467379edccd7a64e6d3cb9ec99f19776"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d5442017acfd3df43e24b024caa649773d9f2c11f3891d291e8338d824998d7"} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b67df6a5f797a58082d920aea9862c86467379edccd7a64e6d3cb9ec99f19776","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d5442017acfd3df43e24b024caa649773d9f2c11f3891d291e8338d824998d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b67df6a5f797a58082d920aea9862c86467379edccd7a64e6d3cb9ec99f19776","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8342423f88191a2c8abd88979a5fafd096c2c0deb0ba04a15458fcc98a0cc068","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8342423f88191a2c8abd88979a5fafd096c2c0deb0ba04a15458fcc98a0cc068","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d5442017acfd3df43e24b024caa649773d9f2c11f3891d291e8338d824998d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8342423f88191a2c8abd88979a5fafd096c2c0deb0ba04a15458fcc98a0cc068","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8342423f88191a2c8abd88979a5fafd096c2c0deb0ba04a15458fcc98a0cc068","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d5442017acfd3df43e24b024caa649773d9f2c11f3891d291e8338d824998d7"} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8342423f88191a2c8abd88979a5fafd096c2c0deb0ba04a15458fcc98a0cc068","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d5442017acfd3df43e24b024caa649773d9f2c11f3891d291e8338d824998d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d5442017acfd3df43e24b024caa649773d9f2c11f3891d291e8338d824998d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b67df6a5f797a58082d920aea9862c86467379edccd7a64e6d3cb9ec99f19776"} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d5442017acfd3df43e24b024caa649773d9f2c11f3891d291e8338d824998d7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d5442017acfd3df43e24b024caa649773d9f2c11f3891d291e8338d824998d7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8342423f88191a2c8abd88979a5fafd096c2c0deb0ba04a15458fcc98a0cc068"} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8342423f88191a2c8abd88979a5fafd096c2c0deb0ba04a15458fcc98a0cc068","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8342423f88191a2c8abd88979a5fafd096c2c0deb0ba04a15458fcc98a0cc068"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8342423f88191a2c8abd88979a5fafd096c2c0deb0ba04a15458fcc98a0cc068","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8342423f88191a2c8abd88979a5fafd096c2c0deb0ba04a15458fcc98a0cc068","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d5442017acfd3df43e24b024caa649773d9f2c11f3891d291e8338d824998d7"} {"level":"info","ts":"2026-07-16T00:53:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8342423f88191a2c8abd88979a5fafd096c2c0deb0ba04a15458fcc98a0cc068"} {"level":"debug","ts":"2026-07-16T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6499a1aa46d1a50cc215c4361089caff52c3d26f05ae7effdfa68cd6da254932","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6499a1aa46d1a50cc215c4361089caff52c3d26f05ae7effdfa68cd6da254932","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6499a1aa46d1a50cc215c4361089caff52c3d26f05ae7effdfa68cd6da254932","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6499a1aa46d1a50cc215c4361089caff52c3d26f05ae7effdfa68cd6da254932"} {"level":"debug","ts":"2026-07-16T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6499a1aa46d1a50cc215c4361089caff52c3d26f05ae7effdfa68cd6da254932","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6499a1aa46d1a50cc215c4361089caff52c3d26f05ae7effdfa68cd6da254932"} {"level":"debug","ts":"2026-07-16T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6499a1aa46d1a50cc215c4361089caff52c3d26f05ae7effdfa68cd6da254932","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6499a1aa46d1a50cc215c4361089caff52c3d26f05ae7effdfa68cd6da254932"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6499a1aa46d1a50cc215c4361089caff52c3d26f05ae7effdfa68cd6da254932","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6499a1aa46d1a50cc215c4361089caff52c3d26f05ae7effdfa68cd6da254932","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6499a1aa46d1a50cc215c4361089caff52c3d26f05ae7effdfa68cd6da254932","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6499a1aa46d1a50cc215c4361089caff52c3d26f05ae7effdfa68cd6da254932","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6499a1aa46d1a50cc215c4361089caff52c3d26f05ae7effdfa68cd6da254932"} {"level":"debug","ts":"2026-07-16T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6499a1aa46d1a50cc215c4361089caff52c3d26f05ae7effdfa68cd6da254932","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6499a1aa46d1a50cc215c4361089caff52c3d26f05ae7effdfa68cd6da254932"} {"level":"debug","ts":"2026-07-16T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6499a1aa46d1a50cc215c4361089caff52c3d26f05ae7effdfa68cd6da254932","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6499a1aa46d1a50cc215c4361089caff52c3d26f05ae7effdfa68cd6da254932"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6499a1aa46d1a50cc215c4361089caff52c3d26f05ae7effdfa68cd6da254932","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6499a1aa46d1a50cc215c4361089caff52c3d26f05ae7effdfa68cd6da254932","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6499a1aa46d1a50cc215c4361089caff52c3d26f05ae7effdfa68cd6da254932"} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05bc56b98f0ef822e06a325e7ffd13de797cc184bd4c01248b54e6b40c15fa9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05bc56b98f0ef822e06a325e7ffd13de797cc184bd4c01248b54e6b40c15fa9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05bc56b98f0ef822e06a325e7ffd13de797cc184bd4c01248b54e6b40c15fa9f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05bc56b98f0ef822e06a325e7ffd13de797cc184bd4c01248b54e6b40c15fa9f"} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05bc56b98f0ef822e06a325e7ffd13de797cc184bd4c01248b54e6b40c15fa9f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05bc56b98f0ef822e06a325e7ffd13de797cc184bd4c01248b54e6b40c15fa9f"} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05bc56b98f0ef822e06a325e7ffd13de797cc184bd4c01248b54e6b40c15fa9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05bc56b98f0ef822e06a325e7ffd13de797cc184bd4c01248b54e6b40c15fa9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05bc56b98f0ef822e06a325e7ffd13de797cc184bd4c01248b54e6b40c15fa9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05bc56b98f0ef822e06a325e7ffd13de797cc184bd4c01248b54e6b40c15fa9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05bc56b98f0ef822e06a325e7ffd13de797cc184bd4c01248b54e6b40c15fa9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05bc56b98f0ef822e06a325e7ffd13de797cc184bd4c01248b54e6b40c15fa9f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05bc56b98f0ef822e06a325e7ffd13de797cc184bd4c01248b54e6b40c15fa9f"} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05bc56b98f0ef822e06a325e7ffd13de797cc184bd4c01248b54e6b40c15fa9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15023b1c9c8112f22cb8fa4044b3b62f484cdc4edc7b187e8cc3457828d91c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05bc56b98f0ef822e06a325e7ffd13de797cc184bd4c01248b54e6b40c15fa9f"} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15023b1c9c8112f22cb8fa4044b3b62f484cdc4edc7b187e8cc3457828d91c3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05bc56b98f0ef822e06a325e7ffd13de797cc184bd4c01248b54e6b40c15fa9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05bc56b98f0ef822e06a325e7ffd13de797cc184bd4c01248b54e6b40c15fa9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15023b1c9c8112f22cb8fa4044b3b62f484cdc4edc7b187e8cc3457828d91c3b"} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05bc56b98f0ef822e06a325e7ffd13de797cc184bd4c01248b54e6b40c15fa9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"391ba1609be730a379ab7b8b0fb04fb005037699814d979afd4717541aaa9ed4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/391ba1609be730a379ab7b8b0fb04fb005037699814d979afd4717541aaa9ed4"} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"391ba1609be730a379ab7b8b0fb04fb005037699814d979afd4717541aaa9ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15023b1c9c8112f22cb8fa4044b3b62f484cdc4edc7b187e8cc3457828d91c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15023b1c9c8112f22cb8fa4044b3b62f484cdc4edc7b187e8cc3457828d91c3b"} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15023b1c9c8112f22cb8fa4044b3b62f484cdc4edc7b187e8cc3457828d91c3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05bc56b98f0ef822e06a325e7ffd13de797cc184bd4c01248b54e6b40c15fa9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05bc56b98f0ef822e06a325e7ffd13de797cc184bd4c01248b54e6b40c15fa9f"} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05bc56b98f0ef822e06a325e7ffd13de797cc184bd4c01248b54e6b40c15fa9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"391ba1609be730a379ab7b8b0fb04fb005037699814d979afd4717541aaa9ed4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/391ba1609be730a379ab7b8b0fb04fb005037699814d979afd4717541aaa9ed4"} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15023b1c9c8112f22cb8fa4044b3b62f484cdc4edc7b187e8cc3457828d91c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15023b1c9c8112f22cb8fa4044b3b62f484cdc4edc7b187e8cc3457828d91c3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15023b1c9c8112f22cb8fa4044b3b62f484cdc4edc7b187e8cc3457828d91c3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"05bc56b98f0ef822e06a325e7ffd13de797cc184bd4c01248b54e6b40c15fa9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["05bc56b98f0ef822e06a325e7ffd13de797cc184bd4c01248b54e6b40c15fa9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15023b1c9c8112f22cb8fa4044b3b62f484cdc4edc7b187e8cc3457828d91c3b"} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"05bc56b98f0ef822e06a325e7ffd13de797cc184bd4c01248b54e6b40c15fa9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"391ba1609be730a379ab7b8b0fb04fb005037699814d979afd4717541aaa9ed4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["391ba1609be730a379ab7b8b0fb04fb005037699814d979afd4717541aaa9ed4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05bc56b98f0ef822e06a325e7ffd13de797cc184bd4c01248b54e6b40c15fa9f"} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"391ba1609be730a379ab7b8b0fb04fb005037699814d979afd4717541aaa9ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15023b1c9c8112f22cb8fa4044b3b62f484cdc4edc7b187e8cc3457828d91c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15023b1c9c8112f22cb8fa4044b3b62f484cdc4edc7b187e8cc3457828d91c3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05bc56b98f0ef822e06a325e7ffd13de797cc184bd4c01248b54e6b40c15fa9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"391ba1609be730a379ab7b8b0fb04fb005037699814d979afd4717541aaa9ed4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15023b1c9c8112f22cb8fa4044b3b62f484cdc4edc7b187e8cc3457828d91c3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15023b1c9c8112f22cb8fa4044b3b62f484cdc4edc7b187e8cc3457828d91c3b"} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15023b1c9c8112f22cb8fa4044b3b62f484cdc4edc7b187e8cc3457828d91c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15023b1c9c8112f22cb8fa4044b3b62f484cdc4edc7b187e8cc3457828d91c3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05bc56b98f0ef822e06a325e7ffd13de797cc184bd4c01248b54e6b40c15fa9f"} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15023b1c9c8112f22cb8fa4044b3b62f484cdc4edc7b187e8cc3457828d91c3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15023b1c9c8112f22cb8fa4044b3b62f484cdc4edc7b187e8cc3457828d91c3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a9a79bfa2170c165ad9d482047c2edc3c20206e112e23ce6c6d7c742a72a00f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/391ba1609be730a379ab7b8b0fb04fb005037699814d979afd4717541aaa9ed4"} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a9a79bfa2170c165ad9d482047c2edc3c20206e112e23ce6c6d7c742a72a00f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a9a79bfa2170c165ad9d482047c2edc3c20206e112e23ce6c6d7c742a72a00f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a9a79bfa2170c165ad9d482047c2edc3c20206e112e23ce6c6d7c742a72a00f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15023b1c9c8112f22cb8fa4044b3b62f484cdc4edc7b187e8cc3457828d91c3b"} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a9a79bfa2170c165ad9d482047c2edc3c20206e112e23ce6c6d7c742a72a00f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a9a79bfa2170c165ad9d482047c2edc3c20206e112e23ce6c6d7c742a72a00f"} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a9a79bfa2170c165ad9d482047c2edc3c20206e112e23ce6c6d7c742a72a00f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a9a79bfa2170c165ad9d482047c2edc3c20206e112e23ce6c6d7c742a72a00f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a9a79bfa2170c165ad9d482047c2edc3c20206e112e23ce6c6d7c742a72a00f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a9a79bfa2170c165ad9d482047c2edc3c20206e112e23ce6c6d7c742a72a00f"} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a9a79bfa2170c165ad9d482047c2edc3c20206e112e23ce6c6d7c742a72a00f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a9a79bfa2170c165ad9d482047c2edc3c20206e112e23ce6c6d7c742a72a00f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a9a79bfa2170c165ad9d482047c2edc3c20206e112e23ce6c6d7c742a72a00f"} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a9a79bfa2170c165ad9d482047c2edc3c20206e112e23ce6c6d7c742a72a00f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a9a79bfa2170c165ad9d482047c2edc3c20206e112e23ce6c6d7c742a72a00f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a9a79bfa2170c165ad9d482047c2edc3c20206e112e23ce6c6d7c742a72a00f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a9a79bfa2170c165ad9d482047c2edc3c20206e112e23ce6c6d7c742a72a00f"} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a9a79bfa2170c165ad9d482047c2edc3c20206e112e23ce6c6d7c742a72a00f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a9a79bfa2170c165ad9d482047c2edc3c20206e112e23ce6c6d7c742a72a00f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a9a79bfa2170c165ad9d482047c2edc3c20206e112e23ce6c6d7c742a72a00f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a9a79bfa2170c165ad9d482047c2edc3c20206e112e23ce6c6d7c742a72a00f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a9a79bfa2170c165ad9d482047c2edc3c20206e112e23ce6c6d7c742a72a00f"} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a9a79bfa2170c165ad9d482047c2edc3c20206e112e23ce6c6d7c742a72a00f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d"} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a9a79bfa2170c165ad9d482047c2edc3c20206e112e23ce6c6d7c742a72a00f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a9a79bfa2170c165ad9d482047c2edc3c20206e112e23ce6c6d7c742a72a00f"} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d"} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a9a79bfa2170c165ad9d482047c2edc3c20206e112e23ce6c6d7c742a72a00f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a9a79bfa2170c165ad9d482047c2edc3c20206e112e23ce6c6d7c742a72a00f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d"} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b"} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a9a79bfa2170c165ad9d482047c2edc3c20206e112e23ce6c6d7c742a72a00f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a9a79bfa2170c165ad9d482047c2edc3c20206e112e23ce6c6d7c742a72a00f"} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a9a79bfa2170c165ad9d482047c2edc3c20206e112e23ce6c6d7c742a72a00f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b"} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b"} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88997750f7918b95a05f3f7f8065fd4b7153acd358bb8d5a344fbb75b4e3c0d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88997750f7918b95a05f3f7f8065fd4b7153acd358bb8d5a344fbb75b4e3c0d0"} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88997750f7918b95a05f3f7f8065fd4b7153acd358bb8d5a344fbb75b4e3c0d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b"} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88997750f7918b95a05f3f7f8065fd4b7153acd358bb8d5a344fbb75b4e3c0d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88997750f7918b95a05f3f7f8065fd4b7153acd358bb8d5a344fbb75b4e3c0d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88997750f7918b95a05f3f7f8065fd4b7153acd358bb8d5a344fbb75b4e3c0d0"} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"88997750f7918b95a05f3f7f8065fd4b7153acd358bb8d5a344fbb75b4e3c0d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["88997750f7918b95a05f3f7f8065fd4b7153acd358bb8d5a344fbb75b4e3c0d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b"} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"88997750f7918b95a05f3f7f8065fd4b7153acd358bb8d5a344fbb75b4e3c0d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88997750f7918b95a05f3f7f8065fd4b7153acd358bb8d5a344fbb75b4e3c0d0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b"} {"level":"debug","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88997750f7918b95a05f3f7f8065fd4b7153acd358bb8d5a344fbb75b4e3c0d0"} {"level":"info","ts":"2026-07-16T00:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b"} {"level":"info","ts":"2026-07-16T00:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3546d5515c0797c064ed2676dada0144d596ec1035f69c9d29b24a49bf3627c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3546d5515c0797c064ed2676dada0144d596ec1035f69c9d29b24a49bf3627c4"} {"level":"info","ts":"2026-07-16T00:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3546d5515c0797c064ed2676dada0144d596ec1035f69c9d29b24a49bf3627c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3546d5515c0797c064ed2676dada0144d596ec1035f69c9d29b24a49bf3627c4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3546d5515c0797c064ed2676dada0144d596ec1035f69c9d29b24a49bf3627c4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b"} {"level":"info","ts":"2026-07-16T00:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3546d5515c0797c064ed2676dada0144d596ec1035f69c9d29b24a49bf3627c4"} {"level":"info","ts":"2026-07-16T00:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3546d5515c0797c064ed2676dada0144d596ec1035f69c9d29b24a49bf3627c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3546d5515c0797c064ed2676dada0144d596ec1035f69c9d29b24a49bf3627c4"} {"level":"debug","ts":"2026-07-16T00:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3546d5515c0797c064ed2676dada0144d596ec1035f69c9d29b24a49bf3627c4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b"} {"level":"debug","ts":"2026-07-16T00:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7"} {"level":"debug","ts":"2026-07-16T00:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7"} {"level":"debug","ts":"2026-07-16T00:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7"} {"level":"debug","ts":"2026-07-16T00:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b67df6a5f797a58082d920aea9862c86467379edccd7a64e6d3cb9ec99f19776","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b67df6a5f797a58082d920aea9862c86467379edccd7a64e6d3cb9ec99f19776","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b67df6a5f797a58082d920aea9862c86467379edccd7a64e6d3cb9ec99f19776","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b67df6a5f797a58082d920aea9862c86467379edccd7a64e6d3cb9ec99f19776"} {"level":"debug","ts":"2026-07-16T00:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b67df6a5f797a58082d920aea9862c86467379edccd7a64e6d3cb9ec99f19776","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b67df6a5f797a58082d920aea9862c86467379edccd7a64e6d3cb9ec99f19776"} {"level":"debug","ts":"2026-07-16T00:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b67df6a5f797a58082d920aea9862c86467379edccd7a64e6d3cb9ec99f19776","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b67df6a5f797a58082d920aea9862c86467379edccd7a64e6d3cb9ec99f19776"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b67df6a5f797a58082d920aea9862c86467379edccd7a64e6d3cb9ec99f19776","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b67df6a5f797a58082d920aea9862c86467379edccd7a64e6d3cb9ec99f19776","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b67df6a5f797a58082d920aea9862c86467379edccd7a64e6d3cb9ec99f19776","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b67df6a5f797a58082d920aea9862c86467379edccd7a64e6d3cb9ec99f19776","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b67df6a5f797a58082d920aea9862c86467379edccd7a64e6d3cb9ec99f19776"} {"level":"debug","ts":"2026-07-16T00:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b67df6a5f797a58082d920aea9862c86467379edccd7a64e6d3cb9ec99f19776","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"88997750f7918b95a05f3f7f8065fd4b7153acd358bb8d5a344fbb75b4e3c0d0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b67df6a5f797a58082d920aea9862c86467379edccd7a64e6d3cb9ec99f19776"} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b67df6a5f797a58082d920aea9862c86467379edccd7a64e6d3cb9ec99f19776","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b67df6a5f797a58082d920aea9862c86467379edccd7a64e6d3cb9ec99f19776"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b67df6a5f797a58082d920aea9862c86467379edccd7a64e6d3cb9ec99f19776","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b67df6a5f797a58082d920aea9862c86467379edccd7a64e6d3cb9ec99f19776","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/88997750f7918b95a05f3f7f8065fd4b7153acd358bb8d5a344fbb75b4e3c0d0"} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b67df6a5f797a58082d920aea9862c86467379edccd7a64e6d3cb9ec99f19776"} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382"} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382"} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382"} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b"} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382"} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d"} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d"} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d"} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d"} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd"} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d"} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd"} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d"} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d"} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a9a79bfa2170c165ad9d482047c2edc3c20206e112e23ce6c6d7c742a72a00f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd"} {"level":"error","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d"} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a9a79bfa2170c165ad9d482047c2edc3c20206e112e23ce6c6d7c742a72a00f"} {"level":"error","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d"} {"level":"error","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8342423f88191a2c8abd88979a5fafd096c2c0deb0ba04a15458fcc98a0cc068","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d"} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d5442017acfd3df43e24b024caa649773d9f2c11f3891d291e8338d824998d7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8342423f88191a2c8abd88979a5fafd096c2c0deb0ba04a15458fcc98a0cc068"} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d5442017acfd3df43e24b024caa649773d9f2c11f3891d291e8338d824998d7"} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d"} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0806e7f6032154e9d45c594a1ff73b1e5807f92fe4c38fb66eb3f9a158259fc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0806e7f6032154e9d45c594a1ff73b1e5807f92fe4c38fb66eb3f9a158259fc6"} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d"} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0806e7f6032154e9d45c594a1ff73b1e5807f92fe4c38fb66eb3f9a158259fc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e516973076960256f315825b886d6a356a96e5049cbc02951b7cdd985a311f24"} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e516973076960256f315825b886d6a356a96e5049cbc02951b7cdd985a311f24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0806e7f6032154e9d45c594a1ff73b1e5807f92fe4c38fb66eb3f9a158259fc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0806e7f6032154e9d45c594a1ff73b1e5807f92fe4c38fb66eb3f9a158259fc6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0806e7f6032154e9d45c594a1ff73b1e5807f92fe4c38fb66eb3f9a158259fc6"} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0806e7f6032154e9d45c594a1ff73b1e5807f92fe4c38fb66eb3f9a158259fc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0806e7f6032154e9d45c594a1ff73b1e5807f92fe4c38fb66eb3f9a158259fc6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0806e7f6032154e9d45c594a1ff73b1e5807f92fe4c38fb66eb3f9a158259fc6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0806e7f6032154e9d45c594a1ff73b1e5807f92fe4c38fb66eb3f9a158259fc6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d"} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0806e7f6032154e9d45c594a1ff73b1e5807f92fe4c38fb66eb3f9a158259fc6"} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15023b1c9c8112f22cb8fa4044b3b62f484cdc4edc7b187e8cc3457828d91c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15023b1c9c8112f22cb8fa4044b3b62f484cdc4edc7b187e8cc3457828d91c3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15023b1c9c8112f22cb8fa4044b3b62f484cdc4edc7b187e8cc3457828d91c3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15023b1c9c8112f22cb8fa4044b3b62f484cdc4edc7b187e8cc3457828d91c3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15023b1c9c8112f22cb8fa4044b3b62f484cdc4edc7b187e8cc3457828d91c3b"} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15023b1c9c8112f22cb8fa4044b3b62f484cdc4edc7b187e8cc3457828d91c3b"} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15023b1c9c8112f22cb8fa4044b3b62f484cdc4edc7b187e8cc3457828d91c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15023b1c9c8112f22cb8fa4044b3b62f484cdc4edc7b187e8cc3457828d91c3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15023b1c9c8112f22cb8fa4044b3b62f484cdc4edc7b187e8cc3457828d91c3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15023b1c9c8112f22cb8fa4044b3b62f484cdc4edc7b187e8cc3457828d91c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15023b1c9c8112f22cb8fa4044b3b62f484cdc4edc7b187e8cc3457828d91c3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15023b1c9c8112f22cb8fa4044b3b62f484cdc4edc7b187e8cc3457828d91c3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15023b1c9c8112f22cb8fa4044b3b62f484cdc4edc7b187e8cc3457828d91c3b"} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15023b1c9c8112f22cb8fa4044b3b62f484cdc4edc7b187e8cc3457828d91c3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3546d5515c0797c064ed2676dada0144d596ec1035f69c9d29b24a49bf3627c4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15023b1c9c8112f22cb8fa4044b3b62f484cdc4edc7b187e8cc3457828d91c3b"} {"level":"debug","ts":"2026-07-16T00:53:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15023b1c9c8112f22cb8fa4044b3b62f484cdc4edc7b187e8cc3457828d91c3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15023b1c9c8112f22cb8fa4044b3b62f484cdc4edc7b187e8cc3457828d91c3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15023b1c9c8112f22cb8fa4044b3b62f484cdc4edc7b187e8cc3457828d91c3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b2f12389ee25112a691054af659acd4f0ddda8e3bf03e359afb9f6c0bf57345","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15023b1c9c8112f22cb8fa4044b3b62f484cdc4edc7b187e8cc3457828d91c3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3546d5515c0797c064ed2676dada0144d596ec1035f69c9d29b24a49bf3627c4"} {"level":"info","ts":"2026-07-16T00:53:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b2f12389ee25112a691054af659acd4f0ddda8e3bf03e359afb9f6c0bf57345"} {"level":"info","ts":"2026-07-16T00:53:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15023b1c9c8112f22cb8fa4044b3b62f484cdc4edc7b187e8cc3457828d91c3b"} {"level":"debug","ts":"2026-07-16T00:53:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48bd9d200cdbb4104ef6fa148ee0c7098ff175f5628ee7c2720899b35a472624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:53:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:53:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48bd9d200cdbb4104ef6fa148ee0c7098ff175f5628ee7c2720899b35a472624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48bd9d200cdbb4104ef6fa148ee0c7098ff175f5628ee7c2720899b35a472624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c7d4993b9aec1370ead91927512ef0062d5835d923994b994526ba1d9cde521","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48bd9d200cdbb4104ef6fa148ee0c7098ff175f5628ee7c2720899b35a472624"} {"level":"debug","ts":"2026-07-16T00:53:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"48bd9d200cdbb4104ef6fa148ee0c7098ff175f5628ee7c2720899b35a472624","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:53:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:53:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["48bd9d200cdbb4104ef6fa148ee0c7098ff175f5628ee7c2720899b35a472624"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:53:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"48bd9d200cdbb4104ef6fa148ee0c7098ff175f5628ee7c2720899b35a472624","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"05bc56b98f0ef822e06a325e7ffd13de797cc184bd4c01248b54e6b40c15fa9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:53:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48bd9d200cdbb4104ef6fa148ee0c7098ff175f5628ee7c2720899b35a472624","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c7d4993b9aec1370ead91927512ef0062d5835d923994b994526ba1d9cde521"} {"level":"debug","ts":"2026-07-16T00:53:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6499a1aa46d1a50cc215c4361089caff52c3d26f05ae7effdfa68cd6da254932","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48bd9d200cdbb4104ef6fa148ee0c7098ff175f5628ee7c2720899b35a472624"} {"level":"info","ts":"2026-07-16T00:53:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/05bc56b98f0ef822e06a325e7ffd13de797cc184bd4c01248b54e6b40c15fa9f"} {"level":"debug","ts":"2026-07-16T00:53:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"391ba1609be730a379ab7b8b0fb04fb005037699814d979afd4717541aaa9ed4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6499a1aa46d1a50cc215c4361089caff52c3d26f05ae7effdfa68cd6da254932"} {"level":"debug","ts":"2026-07-16T00:53:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c5bf47e406f51360906284069add60d790fada6b256f56139e23f6e7bb6ddbae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/391ba1609be730a379ab7b8b0fb04fb005037699814d979afd4717541aaa9ed4"} {"level":"debug","ts":"2026-07-16T00:53:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ec40d5195356941429f8fe254d568524a996761a39a727ffbd6d5fb44fd37a8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c5bf47e406f51360906284069add60d790fada6b256f56139e23f6e7bb6ddbae"} {"level":"debug","ts":"2026-07-16T00:53:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ec40d5195356941429f8fe254d568524a996761a39a727ffbd6d5fb44fd37a8"} {"level":"debug","ts":"2026-07-16T00:53:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"253411cb8ec518faed077c3c98ede35efc9ab5c246f46f011576d39b04279398","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:53:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5"} {"level":"info","ts":"2026-07-16T00:53:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/253411cb8ec518faed077c3c98ede35efc9ab5c246f46f011576d39b04279398"} {"level":"info","ts":"2026-07-16T00:53:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2af3f445-ab6b-4d33-bcf9-c30359942a65","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60138","PortSpecifier":{"PortValue":60138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2af3f445-ab6b-4d33-bcf9-c30359942a65","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T00:53:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2af3f445-ab6b-4d33-bcf9-c30359942a65","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60138","PortSpecifier":{"PortValue":60138}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784163221,"nanos":926751665},"http":{"id":"2af3f445-ab6b-4d33-bcf9-c30359942a65","method":"POST","headers":{":authority":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:53:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2af3f445-ab6b-4d33-bcf9-c30359942a65","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T00:53:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2af3f445-ab6b-4d33-bcf9-c30359942a65","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"]}} {"level":"debug","ts":"2026-07-16T00:53:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2af3f445-ab6b-4d33-bcf9-c30359942a65","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4ec40d5195356941429f8fe254d568524a996761a39a727ffbd6d5fb44fd37a8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:53:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2af3f445-ab6b-4d33-bcf9-c30359942a65","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:53:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2af3f445-ab6b-4d33-bcf9-c30359942a65","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:53:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2af3f445-ab6b-4d33-bcf9-c30359942a65","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ee350/sub-test-model-7ee350\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7ee350/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:53:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2af3f445-ab6b-4d33-bcf9-c30359942a65","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T00:53:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2af3f445-ab6b-4d33-bcf9-c30359942a65","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T00:53:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2af3f445-ab6b-4d33-bcf9-c30359942a65","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T00:53:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2af3f445-ab6b-4d33-bcf9-c30359942a65","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T00:53:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2af3f445-ab6b-4d33-bcf9-c30359942a65","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T00:53:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d814df2b-6bc6-4907-bb09-6b1acacd39d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55732","PortSpecifier":{"PortValue":55732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d814df2b-6bc6-4907-bb09-6b1acacd39d3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T00:53:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d814df2b-6bc6-4907-bb09-6b1acacd39d3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55732","PortSpecifier":{"PortValue":55732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784163221,"nanos":967771348},"http":{"id":"d814df2b-6bc6-4907-bb09-6b1acacd39d3","method":"POST","headers":{":authority":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:53:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d814df2b-6bc6-4907-bb09-6b1acacd39d3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T00:53:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d814df2b-6bc6-4907-bb09-6b1acacd39d3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"]}} {"level":"debug","ts":"2026-07-16T00:53:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d814df2b-6bc6-4907-bb09-6b1acacd39d3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e516973076960256f315825b886d6a356a96e5049cbc02951b7cdd985a311f24"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:53:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d814df2b-6bc6-4907-bb09-6b1acacd39d3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:53:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d814df2b-6bc6-4907-bb09-6b1acacd39d3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:53:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d814df2b-6bc6-4907-bb09-6b1acacd39d3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-07a8dc/sub-test-model-07a8dc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-07a8dc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:53:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d814df2b-6bc6-4907-bb09-6b1acacd39d3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T00:53:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d814df2b-6bc6-4907-bb09-6b1acacd39d3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T00:53:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d814df2b-6bc6-4907-bb09-6b1acacd39d3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T00:53:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d814df2b-6bc6-4907-bb09-6b1acacd39d3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T00:53:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d814df2b-6bc6-4907-bb09-6b1acacd39d3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T00:53:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6266050a-e09b-49d3-b471-1690e09f0fe6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60146","PortSpecifier":{"PortValue":60146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6266050a-e09b-49d3-b471-1690e09f0fe6","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T00:53:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6266050a-e09b-49d3-b471-1690e09f0fe6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60146","PortSpecifier":{"PortValue":60146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784163222,"nanos":3075398},"http":{"id":"6266050a-e09b-49d3-b471-1690e09f0fe6","method":"GET","headers":{":authority":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:53:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6266050a-e09b-49d3-b471-1690e09f0fe6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-piEOjrtvqJsVUYHG_XseKSrCItYeSddYeAwq0lIVkGRrxVCmOXyv1t7in795"} {"level":"debug","ts":"2026-07-16T00:53:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6266050a-e09b-49d3-b471-1690e09f0fe6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7ee350.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-piEOjrtvqJsVUYHG_XseKSrCItYeSddYeAwq0lIVkGRrxVCmOXyv1t7in795\"}"} {"level":"debug","ts":"2026-07-16T00:53:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6266050a-e09b-49d3-b471-1690e09f0fe6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7ee350.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8dce6894-ff61-4793-8f84-22ad2a900023","keyName":"e2e-sub-iso-6a42d4","subscription":"e2e-a-only-15c988","tenant":"e2e-shared-a-7ee350","userId":"8dce6894-ff61-4793-8f84-22ad2a900023","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T00:53:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6266050a-e09b-49d3-b471-1690e09f0fe6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:53:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6266050a-e09b-49d3-b471-1690e09f0fe6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:53:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6266050a-e09b-49d3-b471-1690e09f0fe6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:53:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6266050a-e09b-49d3-b471-1690e09f0fe6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ee350/sub-test-model-7ee350\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7ee350/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:53:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6266050a-e09b-49d3-b471-1690e09f0fe6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-16T00:53:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6266050a-e09b-49d3-b471-1690e09f0fe6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T00:53:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6266050a-e09b-49d3-b471-1690e09f0fe6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T00:53:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6266050a-e09b-49d3-b471-1690e09f0fe6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-15c988"} {"level":"info","ts":"2026-07-16T00:53:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6266050a-e09b-49d3-b471-1690e09f0fe6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T00:53:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6266050a-e09b-49d3-b471-1690e09f0fe6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T00:53:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43949d9b-79de-4d19-a598-73d230eec48e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55738","PortSpecifier":{"PortValue":55738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"43949d9b-79de-4d19-a598-73d230eec48e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T00:53:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43949d9b-79de-4d19-a598-73d230eec48e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:55738","PortSpecifier":{"PortValue":55738}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784163222,"nanos":36198383},"http":{"id":"43949d9b-79de-4d19-a598-73d230eec48e","method":"GET","headers":{":authority":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:53:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"43949d9b-79de-4d19-a598-73d230eec48e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-8T8LYE2ouXI5vux3_3rZaToa79Yz4BHQBl0kcdxER2BLtk0thrHDNb5I0GLe"} {"level":"debug","ts":"2026-07-16T00:53:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"43949d9b-79de-4d19-a598-73d230eec48e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-07a8dc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-8T8LYE2ouXI5vux3_3rZaToa79Yz4BHQBl0kcdxER2BLtk0thrHDNb5I0GLe\"}"} {"level":"debug","ts":"2026-07-16T00:53:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"43949d9b-79de-4d19-a598-73d230eec48e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-07a8dc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d3d31f82-8b7a-43d1-949b-520d81b503e9","keyName":"e2e-sub-iso-59e18a","subscription":"e2e-b-only-15c988","tenant":"e2e-shared-b-07a8dc","userId":"d3d31f82-8b7a-43d1-949b-520d81b503e9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T00:53:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"43949d9b-79de-4d19-a598-73d230eec48e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:53:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43949d9b-79de-4d19-a598-73d230eec48e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:53:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43949d9b-79de-4d19-a598-73d230eec48e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:53:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43949d9b-79de-4d19-a598-73d230eec48e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-07a8dc/sub-test-model-07a8dc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-07a8dc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:53:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43949d9b-79de-4d19-a598-73d230eec48e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T00:53:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43949d9b-79de-4d19-a598-73d230eec48e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-15c988"} {"level":"debug","ts":"2026-07-16T00:53:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43949d9b-79de-4d19-a598-73d230eec48e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T00:53:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"43949d9b-79de-4d19-a598-73d230eec48e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-16T00:53:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43949d9b-79de-4d19-a598-73d230eec48e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T00:53:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43949d9b-79de-4d19-a598-73d230eec48e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ecb6bbdc-54cd-4b78-b09b-c34ce4fca546","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50056","PortSpecifier":{"PortValue":50056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ecb6bbdc-54cd-4b78-b09b-c34ce4fca546","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ecb6bbdc-54cd-4b78-b09b-c34ce4fca546","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50056","PortSpecifier":{"PortValue":50056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784163232,"nanos":128303997},"http":{"id":"ecb6bbdc-54cd-4b78-b09b-c34ce4fca546","method":"POST","headers":{":authority":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ecb6bbdc-54cd-4b78-b09b-c34ce4fca546","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ecb6bbdc-54cd-4b78-b09b-c34ce4fca546","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"]}} {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ecb6bbdc-54cd-4b78-b09b-c34ce4fca546","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4ec40d5195356941429f8fe254d568524a996761a39a727ffbd6d5fb44fd37a8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ecb6bbdc-54cd-4b78-b09b-c34ce4fca546","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ecb6bbdc-54cd-4b78-b09b-c34ce4fca546","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ecb6bbdc-54cd-4b78-b09b-c34ce4fca546","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ee350/sub-test-model-7ee350\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7ee350/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ecb6bbdc-54cd-4b78-b09b-c34ce4fca546","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ecb6bbdc-54cd-4b78-b09b-c34ce4fca546","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ecb6bbdc-54cd-4b78-b09b-c34ce4fca546","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ecb6bbdc-54cd-4b78-b09b-c34ce4fca546","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ecb6bbdc-54cd-4b78-b09b-c34ce4fca546","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f054820-d4d6-44bc-a496-3e51bb5040e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46444","PortSpecifier":{"PortValue":46444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8f054820-d4d6-44bc-a496-3e51bb5040e3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f054820-d4d6-44bc-a496-3e51bb5040e3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46444","PortSpecifier":{"PortValue":46444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784163232,"nanos":168287392},"http":{"id":"8f054820-d4d6-44bc-a496-3e51bb5040e3","method":"POST","headers":{":authority":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8f054820-d4d6-44bc-a496-3e51bb5040e3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8f054820-d4d6-44bc-a496-3e51bb5040e3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"]}} {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8f054820-d4d6-44bc-a496-3e51bb5040e3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e516973076960256f315825b886d6a356a96e5049cbc02951b7cdd985a311f24"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f054820-d4d6-44bc-a496-3e51bb5040e3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f054820-d4d6-44bc-a496-3e51bb5040e3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f054820-d4d6-44bc-a496-3e51bb5040e3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-07a8dc/sub-test-model-07a8dc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-07a8dc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8f054820-d4d6-44bc-a496-3e51bb5040e3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f054820-d4d6-44bc-a496-3e51bb5040e3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f054820-d4d6-44bc-a496-3e51bb5040e3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f054820-d4d6-44bc-a496-3e51bb5040e3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f054820-d4d6-44bc-a496-3e51bb5040e3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ec3e882-efe2-48d1-9ce0-fb53f6724e46","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50062","PortSpecifier":{"PortValue":50062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2ec3e882-efe2-48d1-9ce0-fb53f6724e46","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ec3e882-efe2-48d1-9ce0-fb53f6724e46","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:50062","PortSpecifier":{"PortValue":50062}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784163232,"nanos":201351774},"http":{"id":"2ec3e882-efe2-48d1-9ce0-fb53f6724e46","method":"POST","headers":{":authority":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2ec3e882-efe2-48d1-9ce0-fb53f6724e46","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-XIgiPxuM39RXAGjf_bSOvd8t5ztRgHGb4FxosBm4lPke1KbaiAPBkamB1xFt"} {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2ec3e882-efe2-48d1-9ce0-fb53f6724e46","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7ee350.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-XIgiPxuM39RXAGjf_bSOvd8t5ztRgHGb4FxosBm4lPke1KbaiAPBkamB1xFt\"}"} {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2ec3e882-efe2-48d1-9ce0-fb53f6724e46","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7ee350.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"08148499-bb66-4da8-92e3-ef7b69fd5766","keyName":"e2e-sub-iso-f7aaaa","subscription":"e2e-shared-sub-7e0a7f","tenant":"e2e-shared-a-7ee350","userId":"08148499-bb66-4da8-92e3-ef7b69fd5766","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2ec3e882-efe2-48d1-9ce0-fb53f6724e46","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ec3e882-efe2-48d1-9ce0-fb53f6724e46","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ec3e882-efe2-48d1-9ce0-fb53f6724e46","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ec3e882-efe2-48d1-9ce0-fb53f6724e46","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ee350/sub-test-model-7ee350\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7ee350/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ec3e882-efe2-48d1-9ce0-fb53f6724e46","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2ec3e882-efe2-48d1-9ce0-fb53f6724e46","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ec3e882-efe2-48d1-9ce0-fb53f6724e46","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ec3e882-efe2-48d1-9ce0-fb53f6724e46","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-7e0a7f"} {"level":"info","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ec3e882-efe2-48d1-9ce0-fb53f6724e46","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ec3e882-efe2-48d1-9ce0-fb53f6724e46","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4be057d-5499-4e3c-a032-12f15f7941cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46448","PortSpecifier":{"PortValue":46448}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e4be057d-5499-4e3c-a032-12f15f7941cb","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4be057d-5499-4e3c-a032-12f15f7941cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:46448","PortSpecifier":{"PortValue":46448}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784163232,"nanos":231990950},"http":{"id":"e4be057d-5499-4e3c-a032-12f15f7941cb","method":"POST","headers":{":authority":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e4be057d-5499-4e3c-a032-12f15f7941cb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-10A5anfC1MbLTqyVK_troIatWYtk2cfFXxC9wtsMHUbqX9ODFNaYslFm5WMT5"} {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e4be057d-5499-4e3c-a032-12f15f7941cb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-07a8dc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-10A5anfC1MbLTqyVK_troIatWYtk2cfFXxC9wtsMHUbqX9ODFNaYslFm5WMT5\"}"} {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e4be057d-5499-4e3c-a032-12f15f7941cb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-07a8dc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f5690711-64ef-4128-a378-faa58a214776","keyName":"e2e-sub-iso-e4bb25","subscription":"e2e-shared-sub-7e0a7f","tenant":"e2e-shared-b-07a8dc","userId":"f5690711-64ef-4128-a378-faa58a214776","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e4be057d-5499-4e3c-a032-12f15f7941cb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4be057d-5499-4e3c-a032-12f15f7941cb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4be057d-5499-4e3c-a032-12f15f7941cb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4be057d-5499-4e3c-a032-12f15f7941cb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-07a8dc/sub-test-model-07a8dc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-07a8dc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4be057d-5499-4e3c-a032-12f15f7941cb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4be057d-5499-4e3c-a032-12f15f7941cb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4be057d-5499-4e3c-a032-12f15f7941cb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-7e0a7f"} {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e4be057d-5499-4e3c-a032-12f15f7941cb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4be057d-5499-4e3c-a032-12f15f7941cb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T00:53:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4be057d-5499-4e3c-a032-12f15f7941cb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T00:54:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d5442017acfd3df43e24b024caa649773d9f2c11f3891d291e8338d824998d7"} {"level":"info","ts":"2026-07-16T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b67df6a5f797a58082d920aea9862c86467379edccd7a64e6d3cb9ec99f19776"} {"level":"info","ts":"2026-07-16T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15023b1c9c8112f22cb8fa4044b3b62f484cdc4edc7b187e8cc3457828d91c3b"} {"level":"info","ts":"2026-07-16T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/05bc56b98f0ef822e06a325e7ffd13de797cc184bd4c01248b54e6b40c15fa9f"} {"level":"info","ts":"2026-07-16T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a9a79bfa2170c165ad9d482047c2edc3c20206e112e23ce6c6d7c742a72a00f"} {"level":"info","ts":"2026-07-16T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b2f12389ee25112a691054af659acd4f0ddda8e3bf03e359afb9f6c0bf57345"} {"level":"info","ts":"2026-07-16T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4c332be04c854053f29c6f25168431b1c0edc958485d26d1e157df27efb9c68d"} {"level":"info","ts":"2026-07-16T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c7d4993b9aec1370ead91927512ef0062d5835d923994b994526ba1d9cde521"} {"level":"info","ts":"2026-07-16T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/885a755f6e8fe11c04085e5a7c74c5fb735becd73cd6597344d5ddf5983ab53b"} {"level":"info","ts":"2026-07-16T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/391ba1609be730a379ab7b8b0fb04fb005037699814d979afd4717541aaa9ed4"} {"level":"info","ts":"2026-07-16T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8342423f88191a2c8abd88979a5fafd096c2c0deb0ba04a15458fcc98a0cc068"} {"level":"info","ts":"2026-07-16T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3546d5515c0797c064ed2676dada0144d596ec1035f69c9d29b24a49bf3627c4"} {"level":"info","ts":"2026-07-16T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6499a1aa46d1a50cc215c4361089caff52c3d26f05ae7effdfa68cd6da254932"} {"level":"info","ts":"2026-07-16T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/88997750f7918b95a05f3f7f8065fd4b7153acd358bb8d5a344fbb75b4e3c0d0"} {"level":"info","ts":"2026-07-16T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c5bf47e406f51360906284069add60d790fada6b256f56139e23f6e7bb6ddbae"} {"level":"info","ts":"2026-07-16T00:54:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2d5929a6584608890af63b98ab6cc81cd5b827beff7877cde3108c85665bc3b7"} {"level":"debug","ts":"2026-07-16T00:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e"} {"level":"debug","ts":"2026-07-16T00:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e"} {"level":"debug","ts":"2026-07-16T00:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e"} {"level":"debug","ts":"2026-07-16T00:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e"} {"level":"debug","ts":"2026-07-16T00:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e"} {"level":"debug","ts":"2026-07-16T00:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e"} {"level":"debug","ts":"2026-07-16T00:54:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e"} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e"} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e"} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e"} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e"} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e"} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e"} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e"} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be5640e5339d705bc4ff81169d7201a27741e6d7cec1b4e28c07fdb053c8e71c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e"} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be5640e5339d705bc4ff81169d7201a27741e6d7cec1b4e28c07fdb053c8e71c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be5640e5339d705bc4ff81169d7201a27741e6d7cec1b4e28c07fdb053c8e71c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be5640e5339d705bc4ff81169d7201a27741e6d7cec1b4e28c07fdb053c8e71c"} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be5640e5339d705bc4ff81169d7201a27741e6d7cec1b4e28c07fdb053c8e71c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be5640e5339d705bc4ff81169d7201a27741e6d7cec1b4e28c07fdb053c8e71c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"be5640e5339d705bc4ff81169d7201a27741e6d7cec1b4e28c07fdb053c8e71c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"be5640e5339d705bc4ff81169d7201a27741e6d7cec1b4e28c07fdb053c8e71c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be5640e5339d705bc4ff81169d7201a27741e6d7cec1b4e28c07fdb053c8e71c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be5640e5339d705bc4ff81169d7201a27741e6d7cec1b4e28c07fdb053c8e71c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be5640e5339d705bc4ff81169d7201a27741e6d7cec1b4e28c07fdb053c8e71c"} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be5640e5339d705bc4ff81169d7201a27741e6d7cec1b4e28c07fdb053c8e71c"} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6"} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be5640e5339d705bc4ff81169d7201a27741e6d7cec1b4e28c07fdb053c8e71c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be5640e5339d705bc4ff81169d7201a27741e6d7cec1b4e28c07fdb053c8e71c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6"} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be5640e5339d705bc4ff81169d7201a27741e6d7cec1b4e28c07fdb053c8e71c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be5640e5339d705bc4ff81169d7201a27741e6d7cec1b4e28c07fdb053c8e71c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6"} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be5640e5339d705bc4ff81169d7201a27741e6d7cec1b4e28c07fdb053c8e71c"} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6"} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6"} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0368acd86bb4ffdf76c1085168fd2b9feb2208814041fe3ed30425112c86c8e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0368acd86bb4ffdf76c1085168fd2b9feb2208814041fe3ed30425112c86c8e1"} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0368acd86bb4ffdf76c1085168fd2b9feb2208814041fe3ed30425112c86c8e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0368acd86bb4ffdf76c1085168fd2b9feb2208814041fe3ed30425112c86c8e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0368acd86bb4ffdf76c1085168fd2b9feb2208814041fe3ed30425112c86c8e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6"} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0368acd86bb4ffdf76c1085168fd2b9feb2208814041fe3ed30425112c86c8e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0368acd86bb4ffdf76c1085168fd2b9feb2208814041fe3ed30425112c86c8e1"} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0368acd86bb4ffdf76c1085168fd2b9feb2208814041fe3ed30425112c86c8e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6"} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c84f7c66de8c8454507a98a12a0a3d0d6d7169b173ecfaeabf65413052d5724c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0368acd86bb4ffdf76c1085168fd2b9feb2208814041fe3ed30425112c86c8e1"} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c84f7c66de8c8454507a98a12a0a3d0d6d7169b173ecfaeabf65413052d5724c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6"} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c84f7c66de8c8454507a98a12a0a3d0d6d7169b173ecfaeabf65413052d5724c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c84f7c66de8c8454507a98a12a0a3d0d6d7169b173ecfaeabf65413052d5724c"} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c84f7c66de8c8454507a98a12a0a3d0d6d7169b173ecfaeabf65413052d5724c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c84f7c66de8c8454507a98a12a0a3d0d6d7169b173ecfaeabf65413052d5724c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c84f7c66de8c8454507a98a12a0a3d0d6d7169b173ecfaeabf65413052d5724c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c84f7c66de8c8454507a98a12a0a3d0d6d7169b173ecfaeabf65413052d5724c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c84f7c66de8c8454507a98a12a0a3d0d6d7169b173ecfaeabf65413052d5724c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c84f7c66de8c8454507a98a12a0a3d0d6d7169b173ecfaeabf65413052d5724c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6"} {"level":"error","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c84f7c66de8c8454507a98a12a0a3d0d6d7169b173ecfaeabf65413052d5724c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c84f7c66de8c8454507a98a12a0a3d0d6d7169b173ecfaeabf65413052d5724c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c84f7c66de8c8454507a98a12a0a3d0d6d7169b173ecfaeabf65413052d5724c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c84f7c66de8c8454507a98a12a0a3d0d6d7169b173ecfaeabf65413052d5724c"} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c84f7c66de8c8454507a98a12a0a3d0d6d7169b173ecfaeabf65413052d5724c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c84f7c66de8c8454507a98a12a0a3d0d6d7169b173ecfaeabf65413052d5724c"} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c84f7c66de8c8454507a98a12a0a3d0d6d7169b173ecfaeabf65413052d5724c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c84f7c66de8c8454507a98a12a0a3d0d6d7169b173ecfaeabf65413052d5724c"} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c84f7c66de8c8454507a98a12a0a3d0d6d7169b173ecfaeabf65413052d5724c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c84f7c66de8c8454507a98a12a0a3d0d6d7169b173ecfaeabf65413052d5724c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c84f7c66de8c8454507a98a12a0a3d0d6d7169b173ecfaeabf65413052d5724c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c84f7c66de8c8454507a98a12a0a3d0d6d7169b173ecfaeabf65413052d5724c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6"} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c84f7c66de8c8454507a98a12a0a3d0d6d7169b173ecfaeabf65413052d5724c"} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"336abef3da833abf41409832aea00c74be412c3ad62d13001babcba907f6dbbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"336abef3da833abf41409832aea00c74be412c3ad62d13001babcba907f6dbbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"336abef3da833abf41409832aea00c74be412c3ad62d13001babcba907f6dbbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/336abef3da833abf41409832aea00c74be412c3ad62d13001babcba907f6dbbf"} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"336abef3da833abf41409832aea00c74be412c3ad62d13001babcba907f6dbbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"336abef3da833abf41409832aea00c74be412c3ad62d13001babcba907f6dbbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/336abef3da833abf41409832aea00c74be412c3ad62d13001babcba907f6dbbf"} {"level":"error","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"336abef3da833abf41409832aea00c74be412c3ad62d13001babcba907f6dbbf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"336abef3da833abf41409832aea00c74be412c3ad62d13001babcba907f6dbbf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"336abef3da833abf41409832aea00c74be412c3ad62d13001babcba907f6dbbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"336abef3da833abf41409832aea00c74be412c3ad62d13001babcba907f6dbbf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/336abef3da833abf41409832aea00c74be412c3ad62d13001babcba907f6dbbf"} {"level":"debug","ts":"2026-07-16T00:54:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5aa9b97ea097e39861314b7d2b8e3ec2460fcccc4a54c92fcf8d4ce5a2dbf460","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:08Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5aa9b97ea097e39861314b7d2b8e3ec2460fcccc4a54c92fcf8d4ce5a2dbf460","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5aa9b97ea097e39861314b7d2b8e3ec2460fcccc4a54c92fcf8d4ce5a2dbf460","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"399d0fbb349305207c2c32438548314c61fc44a9f6f4bac54ff5f5d859bb7e08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:09Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5aa9b97ea097e39861314b7d2b8e3ec2460fcccc4a54c92fcf8d4ce5a2dbf460"} {"level":"info","ts":"2026-07-16T00:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"399d0fbb349305207c2c32438548314c61fc44a9f6f4bac54ff5f5d859bb7e08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5aa9b97ea097e39861314b7d2b8e3ec2460fcccc4a54c92fcf8d4ce5a2dbf460","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5aa9b97ea097e39861314b7d2b8e3ec2460fcccc4a54c92fcf8d4ce5a2dbf460"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/399d0fbb349305207c2c32438548314c61fc44a9f6f4bac54ff5f5d859bb7e08"} {"level":"info","ts":"2026-07-16T00:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5aa9b97ea097e39861314b7d2b8e3ec2460fcccc4a54c92fcf8d4ce5a2dbf460","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"336abef3da833abf41409832aea00c74be412c3ad62d13001babcba907f6dbbf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["336abef3da833abf41409832aea00c74be412c3ad62d13001babcba907f6dbbf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5aa9b97ea097e39861314b7d2b8e3ec2460fcccc4a54c92fcf8d4ce5a2dbf460"} {"level":"info","ts":"2026-07-16T00:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"336abef3da833abf41409832aea00c74be412c3ad62d13001babcba907f6dbbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"399d0fbb349305207c2c32438548314c61fc44a9f6f4bac54ff5f5d859bb7e08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:09Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:09Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"399d0fbb349305207c2c32438548314c61fc44a9f6f4bac54ff5f5d859bb7e08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5aa9b97ea097e39861314b7d2b8e3ec2460fcccc4a54c92fcf8d4ce5a2dbf460","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"336abef3da833abf41409832aea00c74be412c3ad62d13001babcba907f6dbbf","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"399d0fbb349305207c2c32438548314c61fc44a9f6f4bac54ff5f5d859bb7e08","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/399d0fbb349305207c2c32438548314c61fc44a9f6f4bac54ff5f5d859bb7e08"} {"level":"debug","ts":"2026-07-16T00:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"399d0fbb349305207c2c32438548314c61fc44a9f6f4bac54ff5f5d859bb7e08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:09Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:09Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["399d0fbb349305207c2c32438548314c61fc44a9f6f4bac54ff5f5d859bb7e08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5aa9b97ea097e39861314b7d2b8e3ec2460fcccc4a54c92fcf8d4ce5a2dbf460"} {"level":"info","ts":"2026-07-16T00:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"399d0fbb349305207c2c32438548314c61fc44a9f6f4bac54ff5f5d859bb7e08","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"399d0fbb349305207c2c32438548314c61fc44a9f6f4bac54ff5f5d859bb7e08","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/336abef3da833abf41409832aea00c74be412c3ad62d13001babcba907f6dbbf"} {"level":"info","ts":"2026-07-16T00:54:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/399d0fbb349305207c2c32438548314c61fc44a9f6f4bac54ff5f5d859bb7e08"} {"level":"debug","ts":"2026-07-16T00:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54648820c38fe8bbcc986f9f35361d32460d86d36edfe2ad3a9894865c2d59f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54648820c38fe8bbcc986f9f35361d32460d86d36edfe2ad3a9894865c2d59f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54648820c38fe8bbcc986f9f35361d32460d86d36edfe2ad3a9894865c2d59f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54648820c38fe8bbcc986f9f35361d32460d86d36edfe2ad3a9894865c2d59f4"} {"level":"info","ts":"2026-07-16T00:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54648820c38fe8bbcc986f9f35361d32460d86d36edfe2ad3a9894865c2d59f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54648820c38fe8bbcc986f9f35361d32460d86d36edfe2ad3a9894865c2d59f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T00:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"54648820c38fe8bbcc986f9f35361d32460d86d36edfe2ad3a9894865c2d59f4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"54648820c38fe8bbcc986f9f35361d32460d86d36edfe2ad3a9894865c2d59f4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T00:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54648820c38fe8bbcc986f9f35361d32460d86d36edfe2ad3a9894865c2d59f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54648820c38fe8bbcc986f9f35361d32460d86d36edfe2ad3a9894865c2d59f4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54648820c38fe8bbcc986f9f35361d32460d86d36edfe2ad3a9894865c2d59f4"} {"level":"info","ts":"2026-07-16T00:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54648820c38fe8bbcc986f9f35361d32460d86d36edfe2ad3a9894865c2d59f4"} {"level":"debug","ts":"2026-07-16T00:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54648820c38fe8bbcc986f9f35361d32460d86d36edfe2ad3a9894865c2d59f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54648820c38fe8bbcc986f9f35361d32460d86d36edfe2ad3a9894865c2d59f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54648820c38fe8bbcc986f9f35361d32460d86d36edfe2ad3a9894865c2d59f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54648820c38fe8bbcc986f9f35361d32460d86d36edfe2ad3a9894865c2d59f4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54648820c38fe8bbcc986f9f35361d32460d86d36edfe2ad3a9894865c2d59f4"} {"level":"debug","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fdc777eef7ef9661111afdef90ebbf39ce8fa87c85c7a2d15d71a4959392a3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fdc777eef7ef9661111afdef90ebbf39ce8fa87c85c7a2d15d71a4959392a3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fdc777eef7ef9661111afdef90ebbf39ce8fa87c85c7a2d15d71a4959392a3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fdc777eef7ef9661111afdef90ebbf39ce8fa87c85c7a2d15d71a4959392a3b"} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fdc777eef7ef9661111afdef90ebbf39ce8fa87c85c7a2d15d71a4959392a3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fdc777eef7ef9661111afdef90ebbf39ce8fa87c85c7a2d15d71a4959392a3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9fdc777eef7ef9661111afdef90ebbf39ce8fa87c85c7a2d15d71a4959392a3b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9fdc777eef7ef9661111afdef90ebbf39ce8fa87c85c7a2d15d71a4959392a3b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fdc777eef7ef9661111afdef90ebbf39ce8fa87c85c7a2d15d71a4959392a3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fdc777eef7ef9661111afdef90ebbf39ce8fa87c85c7a2d15d71a4959392a3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fdc777eef7ef9661111afdef90ebbf39ce8fa87c85c7a2d15d71a4959392a3b"} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fdc777eef7ef9661111afdef90ebbf39ce8fa87c85c7a2d15d71a4959392a3b"} {"level":"debug","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fdc777eef7ef9661111afdef90ebbf39ce8fa87c85c7a2d15d71a4959392a3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fdc777eef7ef9661111afdef90ebbf39ce8fa87c85c7a2d15d71a4959392a3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fdc777eef7ef9661111afdef90ebbf39ce8fa87c85c7a2d15d71a4959392a3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fdc777eef7ef9661111afdef90ebbf39ce8fa87c85c7a2d15d71a4959392a3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fdc777eef7ef9661111afdef90ebbf39ce8fa87c85c7a2d15d71a4959392a3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fdc777eef7ef9661111afdef90ebbf39ce8fa87c85c7a2d15d71a4959392a3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fdc777eef7ef9661111afdef90ebbf39ce8fa87c85c7a2d15d71a4959392a3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fdc777eef7ef9661111afdef90ebbf39ce8fa87c85c7a2d15d71a4959392a3b"} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fdc777eef7ef9661111afdef90ebbf39ce8fa87c85c7a2d15d71a4959392a3b"} {"level":"debug","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9fdc777eef7ef9661111afdef90ebbf39ce8fa87c85c7a2d15d71a4959392a3b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9fdc777eef7ef9661111afdef90ebbf39ce8fa87c85c7a2d15d71a4959392a3b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9fdc777eef7ef9661111afdef90ebbf39ce8fa87c85c7a2d15d71a4959392a3b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fdc777eef7ef9661111afdef90ebbf39ce8fa87c85c7a2d15d71a4959392a3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fdc777eef7ef9661111afdef90ebbf39ce8fa87c85c7a2d15d71a4959392a3b"} {"level":"debug","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f53fc36023191bf137d1fe03523de867904a6c9388c41a0e9a3bfb203b2c140c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f53fc36023191bf137d1fe03523de867904a6c9388c41a0e9a3bfb203b2c140c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f53fc36023191bf137d1fe03523de867904a6c9388c41a0e9a3bfb203b2c140c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f53fc36023191bf137d1fe03523de867904a6c9388c41a0e9a3bfb203b2c140c"} {"level":"debug","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f53fc36023191bf137d1fe03523de867904a6c9388c41a0e9a3bfb203b2c140c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f53fc36023191bf137d1fe03523de867904a6c9388c41a0e9a3bfb203b2c140c"} {"level":"debug","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f53fc36023191bf137d1fe03523de867904a6c9388c41a0e9a3bfb203b2c140c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f53fc36023191bf137d1fe03523de867904a6c9388c41a0e9a3bfb203b2c140c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f53fc36023191bf137d1fe03523de867904a6c9388c41a0e9a3bfb203b2c140c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f53fc36023191bf137d1fe03523de867904a6c9388c41a0e9a3bfb203b2c140c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f53fc36023191bf137d1fe03523de867904a6c9388c41a0e9a3bfb203b2c140c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f53fc36023191bf137d1fe03523de867904a6c9388c41a0e9a3bfb203b2c140c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f53fc36023191bf137d1fe03523de867904a6c9388c41a0e9a3bfb203b2c140c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3530209182ab992f02febaa0c1e03c185087e37ceac7185cebfe38cd4bf7c3b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f53fc36023191bf137d1fe03523de867904a6c9388c41a0e9a3bfb203b2c140c"} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3530209182ab992f02febaa0c1e03c185087e37ceac7185cebfe38cd4bf7c3b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f53fc36023191bf137d1fe03523de867904a6c9388c41a0e9a3bfb203b2c140c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f53fc36023191bf137d1fe03523de867904a6c9388c41a0e9a3bfb203b2c140c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3530209182ab992f02febaa0c1e03c185087e37ceac7185cebfe38cd4bf7c3b5"} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f53fc36023191bf137d1fe03523de867904a6c9388c41a0e9a3bfb203b2c140c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3530209182ab992f02febaa0c1e03c185087e37ceac7185cebfe38cd4bf7c3b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3530209182ab992f02febaa0c1e03c185087e37ceac7185cebfe38cd4bf7c3b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3530209182ab992f02febaa0c1e03c185087e37ceac7185cebfe38cd4bf7c3b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f53fc36023191bf137d1fe03523de867904a6c9388c41a0e9a3bfb203b2c140c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f53fc36023191bf137d1fe03523de867904a6c9388c41a0e9a3bfb203b2c140c"} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f53fc36023191bf137d1fe03523de867904a6c9388c41a0e9a3bfb203b2c140c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3530209182ab992f02febaa0c1e03c185087e37ceac7185cebfe38cd4bf7c3b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3530209182ab992f02febaa0c1e03c185087e37ceac7185cebfe38cd4bf7c3b5"} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3530209182ab992f02febaa0c1e03c185087e37ceac7185cebfe38cd4bf7c3b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f53fc36023191bf137d1fe03523de867904a6c9388c41a0e9a3bfb203b2c140c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3530209182ab992f02febaa0c1e03c185087e37ceac7185cebfe38cd4bf7c3b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3530209182ab992f02febaa0c1e03c185087e37ceac7185cebfe38cd4bf7c3b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f53fc36023191bf137d1fe03523de867904a6c9388c41a0e9a3bfb203b2c140c"} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3530209182ab992f02febaa0c1e03c185087e37ceac7185cebfe38cd4bf7c3b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f53fc36023191bf137d1fe03523de867904a6c9388c41a0e9a3bfb203b2c140c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f53fc36023191bf137d1fe03523de867904a6c9388c41a0e9a3bfb203b2c140c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f53fc36023191bf137d1fe03523de867904a6c9388c41a0e9a3bfb203b2c140c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3530209182ab992f02febaa0c1e03c185087e37ceac7185cebfe38cd4bf7c3b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3530209182ab992f02febaa0c1e03c185087e37ceac7185cebfe38cd4bf7c3b5"} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3530209182ab992f02febaa0c1e03c185087e37ceac7185cebfe38cd4bf7c3b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58dbf8c617dfad61bd0c643afc38bae2c840c051268e48f0d6fc97ace39f0f7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58dbf8c617dfad61bd0c643afc38bae2c840c051268e48f0d6fc97ace39f0f7c"} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58dbf8c617dfad61bd0c643afc38bae2c840c051268e48f0d6fc97ace39f0f7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f53fc36023191bf137d1fe03523de867904a6c9388c41a0e9a3bfb203b2c140c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f53fc36023191bf137d1fe03523de867904a6c9388c41a0e9a3bfb203b2c140c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3530209182ab992f02febaa0c1e03c185087e37ceac7185cebfe38cd4bf7c3b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3530209182ab992f02febaa0c1e03c185087e37ceac7185cebfe38cd4bf7c3b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f53fc36023191bf137d1fe03523de867904a6c9388c41a0e9a3bfb203b2c140c"} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3530209182ab992f02febaa0c1e03c185087e37ceac7185cebfe38cd4bf7c3b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58dbf8c617dfad61bd0c643afc38bae2c840c051268e48f0d6fc97ace39f0f7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58dbf8c617dfad61bd0c643afc38bae2c840c051268e48f0d6fc97ace39f0f7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3530209182ab992f02febaa0c1e03c185087e37ceac7185cebfe38cd4bf7c3b5"} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58dbf8c617dfad61bd0c643afc38bae2c840c051268e48f0d6fc97ace39f0f7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f53fc36023191bf137d1fe03523de867904a6c9388c41a0e9a3bfb203b2c140c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f53fc36023191bf137d1fe03523de867904a6c9388c41a0e9a3bfb203b2c140c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f53fc36023191bf137d1fe03523de867904a6c9388c41a0e9a3bfb203b2c140c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3530209182ab992f02febaa0c1e03c185087e37ceac7185cebfe38cd4bf7c3b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58dbf8c617dfad61bd0c643afc38bae2c840c051268e48f0d6fc97ace39f0f7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58dbf8c617dfad61bd0c643afc38bae2c840c051268e48f0d6fc97ace39f0f7c"} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58dbf8c617dfad61bd0c643afc38bae2c840c051268e48f0d6fc97ace39f0f7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f53fc36023191bf137d1fe03523de867904a6c9388c41a0e9a3bfb203b2c140c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f53fc36023191bf137d1fe03523de867904a6c9388c41a0e9a3bfb203b2c140c"} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f53fc36023191bf137d1fe03523de867904a6c9388c41a0e9a3bfb203b2c140c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed8cc92517938e5d112e42b83a491f2570bfd0947bb84a9fef8703b06a6ee982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed8cc92517938e5d112e42b83a491f2570bfd0947bb84a9fef8703b06a6ee982","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58dbf8c617dfad61bd0c643afc38bae2c840c051268e48f0d6fc97ace39f0f7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58dbf8c617dfad61bd0c643afc38bae2c840c051268e48f0d6fc97ace39f0f7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3530209182ab992f02febaa0c1e03c185087e37ceac7185cebfe38cd4bf7c3b5"} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58dbf8c617dfad61bd0c643afc38bae2c840c051268e48f0d6fc97ace39f0f7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f53fc36023191bf137d1fe03523de867904a6c9388c41a0e9a3bfb203b2c140c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f53fc36023191bf137d1fe03523de867904a6c9388c41a0e9a3bfb203b2c140c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58dbf8c617dfad61bd0c643afc38bae2c840c051268e48f0d6fc97ace39f0f7c"} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f53fc36023191bf137d1fe03523de867904a6c9388c41a0e9a3bfb203b2c140c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed8cc92517938e5d112e42b83a491f2570bfd0947bb84a9fef8703b06a6ee982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed8cc92517938e5d112e42b83a491f2570bfd0947bb84a9fef8703b06a6ee982","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58dbf8c617dfad61bd0c643afc38bae2c840c051268e48f0d6fc97ace39f0f7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f53fc36023191bf137d1fe03523de867904a6c9388c41a0e9a3bfb203b2c140c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed8cc92517938e5d112e42b83a491f2570bfd0947bb84a9fef8703b06a6ee982","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed8cc92517938e5d112e42b83a491f2570bfd0947bb84a9fef8703b06a6ee982"} {"level":"debug","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed8cc92517938e5d112e42b83a491f2570bfd0947bb84a9fef8703b06a6ee982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed8cc92517938e5d112e42b83a491f2570bfd0947bb84a9fef8703b06a6ee982"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed8cc92517938e5d112e42b83a491f2570bfd0947bb84a9fef8703b06a6ee982","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed8cc92517938e5d112e42b83a491f2570bfd0947bb84a9fef8703b06a6ee982","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f53fc36023191bf137d1fe03523de867904a6c9388c41a0e9a3bfb203b2c140c"} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58dbf8c617dfad61bd0c643afc38bae2c840c051268e48f0d6fc97ace39f0f7c"} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed8cc92517938e5d112e42b83a491f2570bfd0947bb84a9fef8703b06a6ee982"} {"level":"debug","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe90abb69ebaa6cdfee9c92e3cbba96526988fbb7ecc2abc35793a50c198a9f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea"} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe90abb69ebaa6cdfee9c92e3cbba96526988fbb7ecc2abc35793a50c198a9f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe90abb69ebaa6cdfee9c92e3cbba96526988fbb7ecc2abc35793a50c198a9f2"} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe90abb69ebaa6cdfee9c92e3cbba96526988fbb7ecc2abc35793a50c198a9f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe90abb69ebaa6cdfee9c92e3cbba96526988fbb7ecc2abc35793a50c198a9f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe90abb69ebaa6cdfee9c92e3cbba96526988fbb7ecc2abc35793a50c198a9f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea"} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe90abb69ebaa6cdfee9c92e3cbba96526988fbb7ecc2abc35793a50c198a9f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe90abb69ebaa6cdfee9c92e3cbba96526988fbb7ecc2abc35793a50c198a9f2"} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe90abb69ebaa6cdfee9c92e3cbba96526988fbb7ecc2abc35793a50c198a9f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe90abb69ebaa6cdfee9c92e3cbba96526988fbb7ecc2abc35793a50c198a9f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe90abb69ebaa6cdfee9c92e3cbba96526988fbb7ecc2abc35793a50c198a9f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea"} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe90abb69ebaa6cdfee9c92e3cbba96526988fbb7ecc2abc35793a50c198a9f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe90abb69ebaa6cdfee9c92e3cbba96526988fbb7ecc2abc35793a50c198a9f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe90abb69ebaa6cdfee9c92e3cbba96526988fbb7ecc2abc35793a50c198a9f2"} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe90abb69ebaa6cdfee9c92e3cbba96526988fbb7ecc2abc35793a50c198a9f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe90abb69ebaa6cdfee9c92e3cbba96526988fbb7ecc2abc35793a50c198a9f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe90abb69ebaa6cdfee9c92e3cbba96526988fbb7ecc2abc35793a50c198a9f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea"} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe90abb69ebaa6cdfee9c92e3cbba96526988fbb7ecc2abc35793a50c198a9f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe90abb69ebaa6cdfee9c92e3cbba96526988fbb7ecc2abc35793a50c198a9f2"} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe90abb69ebaa6cdfee9c92e3cbba96526988fbb7ecc2abc35793a50c198a9f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea"} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe90abb69ebaa6cdfee9c92e3cbba96526988fbb7ecc2abc35793a50c198a9f2"} {"level":"error","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea"} {"level":"error","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea"} {"level":"debug","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea"} {"level":"debug","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea"} {"level":"debug","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea"} {"level":"debug","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea"} {"level":"debug","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea"} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea"} {"level":"debug","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea"} {"level":"debug","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea"} {"level":"debug","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea"} {"level":"debug","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe90abb69ebaa6cdfee9c92e3cbba96526988fbb7ecc2abc35793a50c198a9f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe90abb69ebaa6cdfee9c92e3cbba96526988fbb7ecc2abc35793a50c198a9f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe90abb69ebaa6cdfee9c92e3cbba96526988fbb7ecc2abc35793a50c198a9f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe90abb69ebaa6cdfee9c92e3cbba96526988fbb7ecc2abc35793a50c198a9f2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe90abb69ebaa6cdfee9c92e3cbba96526988fbb7ecc2abc35793a50c198a9f2"} {"level":"debug","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe90abb69ebaa6cdfee9c92e3cbba96526988fbb7ecc2abc35793a50c198a9f2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe90abb69ebaa6cdfee9c92e3cbba96526988fbb7ecc2abc35793a50c198a9f2"} {"level":"debug","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fe90abb69ebaa6cdfee9c92e3cbba96526988fbb7ecc2abc35793a50c198a9f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fe90abb69ebaa6cdfee9c92e3cbba96526988fbb7ecc2abc35793a50c198a9f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fe90abb69ebaa6cdfee9c92e3cbba96526988fbb7ecc2abc35793a50c198a9f2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fe90abb69ebaa6cdfee9c92e3cbba96526988fbb7ecc2abc35793a50c198a9f2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fe90abb69ebaa6cdfee9c92e3cbba96526988fbb7ecc2abc35793a50c198a9f2"} {"level":"debug","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382"} {"level":"debug","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed8cc92517938e5d112e42b83a491f2570bfd0947bb84a9fef8703b06a6ee982","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382"} {"level":"debug","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed8cc92517938e5d112e42b83a491f2570bfd0947bb84a9fef8703b06a6ee982"} {"level":"info","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6155a50478eb79c32293535f222700c0c6215f4320693643122c204b6bb3c382"} {"level":"debug","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54648820c38fe8bbcc986f9f35361d32460d86d36edfe2ad3a9894865c2d59f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54648820c38fe8bbcc986f9f35361d32460d86d36edfe2ad3a9894865c2d59f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54648820c38fe8bbcc986f9f35361d32460d86d36edfe2ad3a9894865c2d59f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54648820c38fe8bbcc986f9f35361d32460d86d36edfe2ad3a9894865c2d59f4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54648820c38fe8bbcc986f9f35361d32460d86d36edfe2ad3a9894865c2d59f4"} {"level":"debug","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54648820c38fe8bbcc986f9f35361d32460d86d36edfe2ad3a9894865c2d59f4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54648820c38fe8bbcc986f9f35361d32460d86d36edfe2ad3a9894865c2d59f4"} {"level":"debug","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54648820c38fe8bbcc986f9f35361d32460d86d36edfe2ad3a9894865c2d59f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54648820c38fe8bbcc986f9f35361d32460d86d36edfe2ad3a9894865c2d59f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54648820c38fe8bbcc986f9f35361d32460d86d36edfe2ad3a9894865c2d59f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54648820c38fe8bbcc986f9f35361d32460d86d36edfe2ad3a9894865c2d59f4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5aa9b97ea097e39861314b7d2b8e3ec2460fcccc4a54c92fcf8d4ce5a2dbf460","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0368acd86bb4ffdf76c1085168fd2b9feb2208814041fe3ed30425112c86c8e1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54648820c38fe8bbcc986f9f35361d32460d86d36edfe2ad3a9894865c2d59f4"} {"level":"info","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5aa9b97ea097e39861314b7d2b8e3ec2460fcccc4a54c92fcf8d4ce5a2dbf460"} {"level":"info","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0368acd86bb4ffdf76c1085168fd2b9feb2208814041fe3ed30425112c86c8e1"} {"level":"debug","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ec40d5195356941429f8fe254d568524a996761a39a727ffbd6d5fb44fd37a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ec40d5195356941429f8fe254d568524a996761a39a727ffbd6d5fb44fd37a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ec40d5195356941429f8fe254d568524a996761a39a727ffbd6d5fb44fd37a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ec40d5195356941429f8fe254d568524a996761a39a727ffbd6d5fb44fd37a8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ec40d5195356941429f8fe254d568524a996761a39a727ffbd6d5fb44fd37a8"} {"level":"debug","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ec40d5195356941429f8fe254d568524a996761a39a727ffbd6d5fb44fd37a8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ec40d5195356941429f8fe254d568524a996761a39a727ffbd6d5fb44fd37a8"} {"level":"debug","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ec40d5195356941429f8fe254d568524a996761a39a727ffbd6d5fb44fd37a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ec40d5195356941429f8fe254d568524a996761a39a727ffbd6d5fb44fd37a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ec40d5195356941429f8fe254d568524a996761a39a727ffbd6d5fb44fd37a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ec40d5195356941429f8fe254d568524a996761a39a727ffbd6d5fb44fd37a8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"399d0fbb349305207c2c32438548314c61fc44a9f6f4bac54ff5f5d859bb7e08","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ec40d5195356941429f8fe254d568524a996761a39a727ffbd6d5fb44fd37a8"} {"level":"info","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/399d0fbb349305207c2c32438548314c61fc44a9f6f4bac54ff5f5d859bb7e08"} {"level":"debug","ts":"2026-07-16T00:54:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f53fc36023191bf137d1fe03523de867904a6c9388c41a0e9a3bfb203b2c140c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0806e7f6032154e9d45c594a1ff73b1e5807f92fe4c38fb66eb3f9a158259fc6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f53fc36023191bf137d1fe03523de867904a6c9388c41a0e9a3bfb203b2c140c"} {"level":"info","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0806e7f6032154e9d45c594a1ff73b1e5807f92fe4c38fb66eb3f9a158259fc6"} {"level":"debug","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58dbf8c617dfad61bd0c643afc38bae2c840c051268e48f0d6fc97ace39f0f7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58dbf8c617dfad61bd0c643afc38bae2c840c051268e48f0d6fc97ace39f0f7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58dbf8c617dfad61bd0c643afc38bae2c840c051268e48f0d6fc97ace39f0f7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58dbf8c617dfad61bd0c643afc38bae2c840c051268e48f0d6fc97ace39f0f7c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58dbf8c617dfad61bd0c643afc38bae2c840c051268e48f0d6fc97ace39f0f7c"} {"level":"debug","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3530209182ab992f02febaa0c1e03c185087e37ceac7185cebfe38cd4bf7c3b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58dbf8c617dfad61bd0c643afc38bae2c840c051268e48f0d6fc97ace39f0f7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58dbf8c617dfad61bd0c643afc38bae2c840c051268e48f0d6fc97ace39f0f7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea"} {"level":"info","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58dbf8c617dfad61bd0c643afc38bae2c840c051268e48f0d6fc97ace39f0f7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c84f7c66de8c8454507a98a12a0a3d0d6d7169b173ecfaeabf65413052d5724c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58dbf8c617dfad61bd0c643afc38bae2c840c051268e48f0d6fc97ace39f0f7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T00:54:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T00:54:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58dbf8c617dfad61bd0c643afc38bae2c840c051268e48f0d6fc97ace39f0f7c"} {"level":"info","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58dbf8c617dfad61bd0c643afc38bae2c840c051268e48f0d6fc97ace39f0f7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e516973076960256f315825b886d6a356a96e5049cbc02951b7cdd985a311f24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58dbf8c617dfad61bd0c643afc38bae2c840c051268e48f0d6fc97ace39f0f7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58dbf8c617dfad61bd0c643afc38bae2c840c051268e48f0d6fc97ace39f0f7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3530209182ab992f02febaa0c1e03c185087e37ceac7185cebfe38cd4bf7c3b5"} {"level":"info","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58dbf8c617dfad61bd0c643afc38bae2c840c051268e48f0d6fc97ace39f0f7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58dbf8c617dfad61bd0c643afc38bae2c840c051268e48f0d6fc97ace39f0f7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T00:54:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T00:54:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58dbf8c617dfad61bd0c643afc38bae2c840c051268e48f0d6fc97ace39f0f7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"58dbf8c617dfad61bd0c643afc38bae2c840c051268e48f0d6fc97ace39f0f7c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"58dbf8c617dfad61bd0c643afc38bae2c840c051268e48f0d6fc97ace39f0f7c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58dbf8c617dfad61bd0c643afc38bae2c840c051268e48f0d6fc97ace39f0f7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58dbf8c617dfad61bd0c643afc38bae2c840c051268e48f0d6fc97ace39f0f7c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"48bd9d200cdbb4104ef6fa148ee0c7098ff175f5628ee7c2720899b35a472624","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c84f7c66de8c8454507a98a12a0a3d0d6d7169b173ecfaeabf65413052d5724c"} {"level":"debug","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58dbf8c617dfad61bd0c643afc38bae2c840c051268e48f0d6fc97ace39f0f7c"} {"level":"debug","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"336abef3da833abf41409832aea00c74be412c3ad62d13001babcba907f6dbbf","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e516973076960256f315825b886d6a356a96e5049cbc02951b7cdd985a311f24"} {"level":"debug","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be5640e5339d705bc4ff81169d7201a27741e6d7cec1b4e28c07fdb053c8e71c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9fdc777eef7ef9661111afdef90ebbf39ce8fa87c85c7a2d15d71a4959392a3b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/48bd9d200cdbb4104ef6fa148ee0c7098ff175f5628ee7c2720899b35a472624"} {"level":"info","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7dcea6edc39e72eb80a43f0ca46cce57f933bb0f7fd09f4f6fc7bf134cf1af5"} {"level":"debug","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/336abef3da833abf41409832aea00c74be412c3ad62d13001babcba907f6dbbf"} {"level":"debug","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be5640e5339d705bc4ff81169d7201a27741e6d7cec1b4e28c07fdb053c8e71c"} {"level":"debug","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9fdc777eef7ef9661111afdef90ebbf39ce8fa87c85c7a2d15d71a4959392a3b"} {"level":"info","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e"} {"level":"debug","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"253411cb8ec518faed077c3c98ede35efc9ab5c246f46f011576d39b04279398","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd"} {"level":"info","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6"} {"level":"info","ts":"2026-07-16T00:54:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/253411cb8ec518faed077c3c98ede35efc9ab5c246f46f011576d39b04279398"} {"level":"info","ts":"2026-07-16T00:55:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72bd96ee-6486-4cae-a844-685e5e897298","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39264","PortSpecifier":{"PortValue":39264}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"72bd96ee-6486-4cae-a844-685e5e897298","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T00:55:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72bd96ee-6486-4cae-a844-685e5e897298","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39264","PortSpecifier":{"PortValue":39264}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784163302,"nanos":267797510},"http":{"id":"72bd96ee-6486-4cae-a844-685e5e897298","method":"POST","headers":{":authority":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:55:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"72bd96ee-6486-4cae-a844-685e5e897298","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T00:55:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"72bd96ee-6486-4cae-a844-685e5e897298","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"]}} {"level":"debug","ts":"2026-07-16T00:55:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"72bd96ee-6486-4cae-a844-685e5e897298","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4ec40d5195356941429f8fe254d568524a996761a39a727ffbd6d5fb44fd37a8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:55:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72bd96ee-6486-4cae-a844-685e5e897298","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:55:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72bd96ee-6486-4cae-a844-685e5e897298","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:55:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72bd96ee-6486-4cae-a844-685e5e897298","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ee350/rate-test-model-7ee350\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7ee350/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:55:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"72bd96ee-6486-4cae-a844-685e5e897298","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T00:55:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72bd96ee-6486-4cae-a844-685e5e897298","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T00:55:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72bd96ee-6486-4cae-a844-685e5e897298","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T00:55:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72bd96ee-6486-4cae-a844-685e5e897298","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T00:55:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72bd96ee-6486-4cae-a844-685e5e897298","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T00:55:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8aeaf9b2-6d7c-45ac-bf39-a19b68feef4d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44892","PortSpecifier":{"PortValue":44892}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8aeaf9b2-6d7c-45ac-bf39-a19b68feef4d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T00:55:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8aeaf9b2-6d7c-45ac-bf39-a19b68feef4d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:44892","PortSpecifier":{"PortValue":44892}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784163302,"nanos":312228812},"http":{"id":"8aeaf9b2-6d7c-45ac-bf39-a19b68feef4d","method":"POST","headers":{":authority":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:55:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8aeaf9b2-6d7c-45ac-bf39-a19b68feef4d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T00:55:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8aeaf9b2-6d7c-45ac-bf39-a19b68feef4d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"]}} {"level":"debug","ts":"2026-07-16T00:55:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8aeaf9b2-6d7c-45ac-bf39-a19b68feef4d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e516973076960256f315825b886d6a356a96e5049cbc02951b7cdd985a311f24"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:55:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8aeaf9b2-6d7c-45ac-bf39-a19b68feef4d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:55:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8aeaf9b2-6d7c-45ac-bf39-a19b68feef4d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:55:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8aeaf9b2-6d7c-45ac-bf39-a19b68feef4d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-07a8dc/rate-test-model-07a8dc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-07a8dc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:55:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8aeaf9b2-6d7c-45ac-bf39-a19b68feef4d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T00:55:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8aeaf9b2-6d7c-45ac-bf39-a19b68feef4d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T00:55:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8aeaf9b2-6d7c-45ac-bf39-a19b68feef4d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T00:55:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8aeaf9b2-6d7c-45ac-bf39-a19b68feef4d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T00:55:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8aeaf9b2-6d7c-45ac-bf39-a19b68feef4d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T00:55:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2cdb0e66-0740-403e-ab3e-98f633078c0e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39276","PortSpecifier":{"PortValue":39276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2cdb0e66-0740-403e-ab3e-98f633078c0e","method":"POST","path":"/ai-tenant-e2e-shared-a-7ee350/rate-test-model-7ee350/v1/completions","host":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T00:55:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2cdb0e66-0740-403e-ab3e-98f633078c0e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39276","PortSpecifier":{"PortValue":39276}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784163302,"nanos":354761351},"http":{"id":"2cdb0e66-0740-403e-ab3e-98f633078c0e","method":"POST","headers":{":authority":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7ee350/rate-test-model-7ee350/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:55:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2cdb0e66-0740-403e-ab3e-98f633078c0e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-rRiiCP4TXCnGPCc9_QQL7ebbKXjomKFJ9m4RNTjryJoGpamRbjELIBqJvZ1Q"} {"level":"debug","ts":"2026-07-16T00:55:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2cdb0e66-0740-403e-ab3e-98f633078c0e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7ee350.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-rRiiCP4TXCnGPCc9_QQL7ebbKXjomKFJ9m4RNTjryJoGpamRbjELIBqJvZ1Q\"}"} {"level":"debug","ts":"2026-07-16T00:55:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2cdb0e66-0740-403e-ab3e-98f633078c0e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7ee350.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c9543259-92a3-4854-9f2b-8ae2bedad097","keyName":"e2e-rate-a-8a0aaf","subscription":"e2e-rate-iso-a-8a0aaf","tenant":"e2e-shared-a-7ee350","userId":"c9543259-92a3-4854-9f2b-8ae2bedad097","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T00:55:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2cdb0e66-0740-403e-ab3e-98f633078c0e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7ee350.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7ee350/rate-test-model-7ee350\",\"requestedSubscription\":\"e2e-rate-iso-a-8a0aaf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T00:55:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2cdb0e66-0740-403e-ab3e-98f633078c0e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7ee350.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7ee350","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8a0aaf","namespace":"ai-tenant-e2e-shared-a-7ee350","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T00:55:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2cdb0e66-0740-403e-ab3e-98f633078c0e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:55:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cdb0e66-0740-403e-ab3e-98f633078c0e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:55:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cdb0e66-0740-403e-ab3e-98f633078c0e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:55:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cdb0e66-0740-403e-ab3e-98f633078c0e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ee350/rate-test-model-7ee350\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7ee350/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:55:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2cdb0e66-0740-403e-ab3e-98f633078c0e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:55:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cdb0e66-0740-403e-ab3e-98f633078c0e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T00:55:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cdb0e66-0740-403e-ab3e-98f633078c0e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8a0aaf"} {"level":"debug","ts":"2026-07-16T00:55:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cdb0e66-0740-403e-ab3e-98f633078c0e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T00:55:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2cdb0e66-0740-403e-ab3e-98f633078c0e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c9543259-92a3-4854-9f2b-8ae2bedad097","keyName":"e2e-rate-a-8a0aaf","selected_subscription":"e2e-rate-iso-a-8a0aaf","selected_subscription_key":"ai-tenant-e2e-shared-a-7ee350/e2e-rate-iso-a-8a0aaf@ai-tenant-e2e-shared-a-7ee350/rate-test-model-7ee350","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7ee350","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8a0aaf","namespace":"ai-tenant-e2e-shared-a-7ee350","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T00:55:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2cdb0e66-0740-403e-ab3e-98f633078c0e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T00:55:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2cdb0e66-0740-403e-ab3e-98f633078c0e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T00:55:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cca932cf-9146-4e24-b866-c4419f56304d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39288","PortSpecifier":{"PortValue":39288}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cca932cf-9146-4e24-b866-c4419f56304d","method":"POST","path":"/ai-tenant-e2e-shared-a-7ee350/rate-test-model-7ee350/v1/completions","host":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T00:55:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cca932cf-9146-4e24-b866-c4419f56304d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39288","PortSpecifier":{"PortValue":39288}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784163303,"nanos":450846977},"http":{"id":"cca932cf-9146-4e24-b866-c4419f56304d","method":"POST","headers":{":authority":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7ee350/rate-test-model-7ee350/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:55:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cca932cf-9146-4e24-b866-c4419f56304d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-rRiiCP4TXCnGPCc9_QQL7ebbKXjomKFJ9m4RNTjryJoGpamRbjELIBqJvZ1Q"} {"level":"debug","ts":"2026-07-16T00:55:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cca932cf-9146-4e24-b866-c4419f56304d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7ee350.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-rRiiCP4TXCnGPCc9_QQL7ebbKXjomKFJ9m4RNTjryJoGpamRbjELIBqJvZ1Q\"}"} {"level":"debug","ts":"2026-07-16T00:55:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cca932cf-9146-4e24-b866-c4419f56304d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7ee350.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c9543259-92a3-4854-9f2b-8ae2bedad097","keyName":"e2e-rate-a-8a0aaf","subscription":"e2e-rate-iso-a-8a0aaf","tenant":"e2e-shared-a-7ee350","userId":"c9543259-92a3-4854-9f2b-8ae2bedad097","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T00:55:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"cca932cf-9146-4e24-b866-c4419f56304d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7ee350.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7ee350/rate-test-model-7ee350\",\"requestedSubscription\":\"e2e-rate-iso-a-8a0aaf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T00:55:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"cca932cf-9146-4e24-b866-c4419f56304d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7ee350.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7ee350","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8a0aaf","namespace":"ai-tenant-e2e-shared-a-7ee350","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T00:55:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cca932cf-9146-4e24-b866-c4419f56304d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:55:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cca932cf-9146-4e24-b866-c4419f56304d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:55:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cca932cf-9146-4e24-b866-c4419f56304d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ee350/rate-test-model-7ee350\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7ee350/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:55:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cca932cf-9146-4e24-b866-c4419f56304d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:55:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cca932cf-9146-4e24-b866-c4419f56304d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:55:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cca932cf-9146-4e24-b866-c4419f56304d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T00:55:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cca932cf-9146-4e24-b866-c4419f56304d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8a0aaf"} {"level":"debug","ts":"2026-07-16T00:55:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cca932cf-9146-4e24-b866-c4419f56304d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T00:55:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cca932cf-9146-4e24-b866-c4419f56304d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c9543259-92a3-4854-9f2b-8ae2bedad097","keyName":"e2e-rate-a-8a0aaf","selected_subscription":"e2e-rate-iso-a-8a0aaf","selected_subscription_key":"ai-tenant-e2e-shared-a-7ee350/e2e-rate-iso-a-8a0aaf@ai-tenant-e2e-shared-a-7ee350/rate-test-model-7ee350","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7ee350","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8a0aaf","namespace":"ai-tenant-e2e-shared-a-7ee350","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T00:55:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cca932cf-9146-4e24-b866-c4419f56304d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T00:55:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cca932cf-9146-4e24-b866-c4419f56304d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T00:55:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9066360-1c61-4045-9e8a-0f5e49e70d98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39292","PortSpecifier":{"PortValue":39292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c9066360-1c61-4045-9e8a-0f5e49e70d98","method":"POST","path":"/ai-tenant-e2e-shared-a-7ee350/rate-test-model-7ee350/v1/completions","host":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T00:55:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9066360-1c61-4045-9e8a-0f5e49e70d98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:39292","PortSpecifier":{"PortValue":39292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784163304,"nanos":493028373},"http":{"id":"c9066360-1c61-4045-9e8a-0f5e49e70d98","method":"POST","headers":{":authority":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7ee350/rate-test-model-7ee350/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:55:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c9066360-1c61-4045-9e8a-0f5e49e70d98","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-rRiiCP4TXCnGPCc9_QQL7ebbKXjomKFJ9m4RNTjryJoGpamRbjELIBqJvZ1Q"} {"level":"debug","ts":"2026-07-16T00:55:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c9066360-1c61-4045-9e8a-0f5e49e70d98","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7ee350.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-rRiiCP4TXCnGPCc9_QQL7ebbKXjomKFJ9m4RNTjryJoGpamRbjELIBqJvZ1Q\"}"} {"level":"debug","ts":"2026-07-16T00:55:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c9066360-1c61-4045-9e8a-0f5e49e70d98","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7ee350.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c9543259-92a3-4854-9f2b-8ae2bedad097","keyName":"e2e-rate-a-8a0aaf","subscription":"e2e-rate-iso-a-8a0aaf","tenant":"e2e-shared-a-7ee350","userId":"c9543259-92a3-4854-9f2b-8ae2bedad097","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T00:55:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c9066360-1c61-4045-9e8a-0f5e49e70d98","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7ee350.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7ee350/rate-test-model-7ee350\",\"requestedSubscription\":\"e2e-rate-iso-a-8a0aaf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T00:55:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c9066360-1c61-4045-9e8a-0f5e49e70d98","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7ee350.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7ee350","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8a0aaf","namespace":"ai-tenant-e2e-shared-a-7ee350","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T00:55:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c9066360-1c61-4045-9e8a-0f5e49e70d98","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:55:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9066360-1c61-4045-9e8a-0f5e49e70d98","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:55:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9066360-1c61-4045-9e8a-0f5e49e70d98","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:55:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9066360-1c61-4045-9e8a-0f5e49e70d98","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ee350/rate-test-model-7ee350\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7ee350/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:55:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9066360-1c61-4045-9e8a-0f5e49e70d98","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:55:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9066360-1c61-4045-9e8a-0f5e49e70d98","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T00:55:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9066360-1c61-4045-9e8a-0f5e49e70d98","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T00:55:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9066360-1c61-4045-9e8a-0f5e49e70d98","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-8a0aaf"} {"level":"debug","ts":"2026-07-16T00:55:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9066360-1c61-4045-9e8a-0f5e49e70d98","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c9543259-92a3-4854-9f2b-8ae2bedad097","keyName":"e2e-rate-a-8a0aaf","selected_subscription":"e2e-rate-iso-a-8a0aaf","selected_subscription_key":"ai-tenant-e2e-shared-a-7ee350/e2e-rate-iso-a-8a0aaf@ai-tenant-e2e-shared-a-7ee350/rate-test-model-7ee350","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7ee350","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-8a0aaf","namespace":"ai-tenant-e2e-shared-a-7ee350","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T00:55:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9066360-1c61-4045-9e8a-0f5e49e70d98","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T00:55:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9066360-1c61-4045-9e8a-0f5e49e70d98","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T00:55:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b4979f5-f5ce-4198-9788-3b8ce2d9361d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60598","PortSpecifier":{"PortValue":60598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5b4979f5-f5ce-4198-9788-3b8ce2d9361d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T00:55:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5b4979f5-f5ce-4198-9788-3b8ce2d9361d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60598","PortSpecifier":{"PortValue":60598}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784163317,"nanos":393093320},"http":{"id":"5b4979f5-f5ce-4198-9788-3b8ce2d9361d","method":"POST","headers":{":authority":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:55:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5b4979f5-f5ce-4198-9788-3b8ce2d9361d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T00:55:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5b4979f5-f5ce-4198-9788-3b8ce2d9361d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"]}} {"level":"debug","ts":"2026-07-16T00:55:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5b4979f5-f5ce-4198-9788-3b8ce2d9361d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4ec40d5195356941429f8fe254d568524a996761a39a727ffbd6d5fb44fd37a8"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.31:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:55:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b4979f5-f5ce-4198-9788-3b8ce2d9361d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:55:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b4979f5-f5ce-4198-9788-3b8ce2d9361d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:55:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5b4979f5-f5ce-4198-9788-3b8ce2d9361d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ee350/rate-test-model-7ee350\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7ee350/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:55:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5b4979f5-f5ce-4198-9788-3b8ce2d9361d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T00:55:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b4979f5-f5ce-4198-9788-3b8ce2d9361d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T00:55:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5b4979f5-f5ce-4198-9788-3b8ce2d9361d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-16T00:55:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b4979f5-f5ce-4198-9788-3b8ce2d9361d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T00:55:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5b4979f5-f5ce-4198-9788-3b8ce2d9361d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T00:55:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89aee030-91e1-4858-af08-302f0af79ca4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38398","PortSpecifier":{"PortValue":38398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"89aee030-91e1-4858-af08-302f0af79ca4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T00:55:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89aee030-91e1-4858-af08-302f0af79ca4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38398","PortSpecifier":{"PortValue":38398}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784163317,"nanos":441386163},"http":{"id":"89aee030-91e1-4858-af08-302f0af79ca4","method":"POST","headers":{":authority":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:55:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"89aee030-91e1-4858-af08-302f0af79ca4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-16T00:55:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"89aee030-91e1-4858-af08-302f0af79ca4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"]}} {"level":"debug","ts":"2026-07-16T00:55:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"89aee030-91e1-4858-af08-302f0af79ca4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fd408835caca"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=06bcaa48-6278-43ee-bc46-6d7794a64cd8"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"01e893ab-0ac3-4051-a4c7-91cb8d70693d","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"e516973076960256f315825b886d6a356a96e5049cbc02951b7cdd985a311f24"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:55:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89aee030-91e1-4858-af08-302f0af79ca4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:55:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89aee030-91e1-4858-af08-302f0af79ca4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:55:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89aee030-91e1-4858-af08-302f0af79ca4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-07a8dc/rate-test-model-07a8dc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-07a8dc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:55:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"89aee030-91e1-4858-af08-302f0af79ca4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-16T00:55:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89aee030-91e1-4858-af08-302f0af79ca4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T00:55:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89aee030-91e1-4858-af08-302f0af79ca4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-16T00:55:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89aee030-91e1-4858-af08-302f0af79ca4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T00:55:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89aee030-91e1-4858-af08-302f0af79ca4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T00:55:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e02c3a44-54b5-4b94-b9ec-c8f1502d5062","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60606","PortSpecifier":{"PortValue":60606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e02c3a44-54b5-4b94-b9ec-c8f1502d5062","method":"POST","path":"/ai-tenant-e2e-shared-a-7ee350/rate-test-model-7ee350/v1/completions","host":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T00:55:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e02c3a44-54b5-4b94-b9ec-c8f1502d5062","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60606","PortSpecifier":{"PortValue":60606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784163317,"nanos":479440119},"http":{"id":"e02c3a44-54b5-4b94-b9ec-c8f1502d5062","method":"POST","headers":{":authority":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7ee350/rate-test-model-7ee350/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:55:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e02c3a44-54b5-4b94-b9ec-c8f1502d5062","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vup0JMutRmN2czKj_qQEuvtDqTwUDyVPH2JO83CQPVRIM9DPaRJIrXZu7pbe"} {"level":"debug","ts":"2026-07-16T00:55:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e02c3a44-54b5-4b94-b9ec-c8f1502d5062","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7ee350.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vup0JMutRmN2czKj_qQEuvtDqTwUDyVPH2JO83CQPVRIM9DPaRJIrXZu7pbe\"}"} {"level":"debug","ts":"2026-07-16T00:55:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e02c3a44-54b5-4b94-b9ec-c8f1502d5062","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7ee350.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"110ef446-267e-4371-a5c7-9a1612060f14","keyName":"e2e-rate-a-903544","subscription":"e2e-rate-iso-a-903544","tenant":"e2e-shared-a-7ee350","userId":"110ef446-267e-4371-a5c7-9a1612060f14","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T00:55:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e02c3a44-54b5-4b94-b9ec-c8f1502d5062","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7ee350.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7ee350/rate-test-model-7ee350\",\"requestedSubscription\":\"e2e-rate-iso-a-903544\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T00:55:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e02c3a44-54b5-4b94-b9ec-c8f1502d5062","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7ee350.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7ee350","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-903544","namespace":"ai-tenant-e2e-shared-a-7ee350","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T00:55:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e02c3a44-54b5-4b94-b9ec-c8f1502d5062","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:55:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e02c3a44-54b5-4b94-b9ec-c8f1502d5062","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:55:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e02c3a44-54b5-4b94-b9ec-c8f1502d5062","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:55:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e02c3a44-54b5-4b94-b9ec-c8f1502d5062","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ee350/rate-test-model-7ee350\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7ee350/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:55:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e02c3a44-54b5-4b94-b9ec-c8f1502d5062","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:55:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e02c3a44-54b5-4b94-b9ec-c8f1502d5062","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-903544"} {"level":"debug","ts":"2026-07-16T00:55:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e02c3a44-54b5-4b94-b9ec-c8f1502d5062","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T00:55:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e02c3a44-54b5-4b94-b9ec-c8f1502d5062","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T00:55:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e02c3a44-54b5-4b94-b9ec-c8f1502d5062","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"110ef446-267e-4371-a5c7-9a1612060f14","keyName":"e2e-rate-a-903544","selected_subscription":"e2e-rate-iso-a-903544","selected_subscription_key":"ai-tenant-e2e-shared-a-7ee350/e2e-rate-iso-a-903544@ai-tenant-e2e-shared-a-7ee350/rate-test-model-7ee350","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7ee350","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-903544","namespace":"ai-tenant-e2e-shared-a-7ee350","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T00:55:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e02c3a44-54b5-4b94-b9ec-c8f1502d5062","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T00:55:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e02c3a44-54b5-4b94-b9ec-c8f1502d5062","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T00:55:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8a0401e-df98-4ee0-9ae7-5e336bbe9539","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60612","PortSpecifier":{"PortValue":60612}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c8a0401e-df98-4ee0-9ae7-5e336bbe9539","method":"POST","path":"/ai-tenant-e2e-shared-a-7ee350/rate-test-model-7ee350/v1/completions","host":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T00:55:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8a0401e-df98-4ee0-9ae7-5e336bbe9539","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60612","PortSpecifier":{"PortValue":60612}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784163318,"nanos":522328372},"http":{"id":"c8a0401e-df98-4ee0-9ae7-5e336bbe9539","method":"POST","headers":{":authority":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7ee350/rate-test-model-7ee350/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:55:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c8a0401e-df98-4ee0-9ae7-5e336bbe9539","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vup0JMutRmN2czKj_qQEuvtDqTwUDyVPH2JO83CQPVRIM9DPaRJIrXZu7pbe"} {"level":"debug","ts":"2026-07-16T00:55:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c8a0401e-df98-4ee0-9ae7-5e336bbe9539","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7ee350.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vup0JMutRmN2czKj_qQEuvtDqTwUDyVPH2JO83CQPVRIM9DPaRJIrXZu7pbe\"}"} {"level":"debug","ts":"2026-07-16T00:55:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c8a0401e-df98-4ee0-9ae7-5e336bbe9539","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7ee350.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"110ef446-267e-4371-a5c7-9a1612060f14","keyName":"e2e-rate-a-903544","subscription":"e2e-rate-iso-a-903544","tenant":"e2e-shared-a-7ee350","userId":"110ef446-267e-4371-a5c7-9a1612060f14","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T00:55:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c8a0401e-df98-4ee0-9ae7-5e336bbe9539","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7ee350.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7ee350/rate-test-model-7ee350\",\"requestedSubscription\":\"e2e-rate-iso-a-903544\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T00:55:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c8a0401e-df98-4ee0-9ae7-5e336bbe9539","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7ee350.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7ee350","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-903544","namespace":"ai-tenant-e2e-shared-a-7ee350","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T00:55:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c8a0401e-df98-4ee0-9ae7-5e336bbe9539","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:55:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8a0401e-df98-4ee0-9ae7-5e336bbe9539","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:55:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8a0401e-df98-4ee0-9ae7-5e336bbe9539","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:55:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8a0401e-df98-4ee0-9ae7-5e336bbe9539","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:55:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8a0401e-df98-4ee0-9ae7-5e336bbe9539","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ee350/rate-test-model-7ee350\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7ee350/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:55:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8a0401e-df98-4ee0-9ae7-5e336bbe9539","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-903544"} {"level":"debug","ts":"2026-07-16T00:55:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8a0401e-df98-4ee0-9ae7-5e336bbe9539","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T00:55:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8a0401e-df98-4ee0-9ae7-5e336bbe9539","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T00:55:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8a0401e-df98-4ee0-9ae7-5e336bbe9539","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"110ef446-267e-4371-a5c7-9a1612060f14","keyName":"e2e-rate-a-903544","selected_subscription":"e2e-rate-iso-a-903544","selected_subscription_key":"ai-tenant-e2e-shared-a-7ee350/e2e-rate-iso-a-903544@ai-tenant-e2e-shared-a-7ee350/rate-test-model-7ee350","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7ee350","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-903544","namespace":"ai-tenant-e2e-shared-a-7ee350","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T00:55:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8a0401e-df98-4ee0-9ae7-5e336bbe9539","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T00:55:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8a0401e-df98-4ee0-9ae7-5e336bbe9539","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T00:55:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5b77d9a-97fc-4728-b7ee-44961ad3afce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60618","PortSpecifier":{"PortValue":60618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d5b77d9a-97fc-4728-b7ee-44961ad3afce","method":"POST","path":"/ai-tenant-e2e-shared-a-7ee350/rate-test-model-7ee350/v1/completions","host":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T00:55:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d5b77d9a-97fc-4728-b7ee-44961ad3afce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:60618","PortSpecifier":{"PortValue":60618}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.31:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784163319,"nanos":561981140},"http":{"id":"d5b77d9a-97fc-4728-b7ee-44961ad3afce","method":"POST","headers":{":authority":"e2e-shared-a-7ee350.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-7ee350/rate-test-model-7ee350/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:55:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d5b77d9a-97fc-4728-b7ee-44961ad3afce","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vup0JMutRmN2czKj_qQEuvtDqTwUDyVPH2JO83CQPVRIM9DPaRJIrXZu7pbe"} {"level":"debug","ts":"2026-07-16T00:55:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d5b77d9a-97fc-4728-b7ee-44961ad3afce","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-7ee350.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vup0JMutRmN2czKj_qQEuvtDqTwUDyVPH2JO83CQPVRIM9DPaRJIrXZu7pbe\"}"} {"level":"debug","ts":"2026-07-16T00:55:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d5b77d9a-97fc-4728-b7ee-44961ad3afce","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7ee350.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"110ef446-267e-4371-a5c7-9a1612060f14","keyName":"e2e-rate-a-903544","subscription":"e2e-rate-iso-a-903544","tenant":"e2e-shared-a-7ee350","userId":"110ef446-267e-4371-a5c7-9a1612060f14","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T00:55:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d5b77d9a-97fc-4728-b7ee-44961ad3afce","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-7ee350.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-7ee350/rate-test-model-7ee350\",\"requestedSubscription\":\"e2e-rate-iso-a-903544\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T00:55:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d5b77d9a-97fc-4728-b7ee-44961ad3afce","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-7ee350.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7ee350","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-903544","namespace":"ai-tenant-e2e-shared-a-7ee350","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T00:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d5b77d9a-97fc-4728-b7ee-44961ad3afce","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5b77d9a-97fc-4728-b7ee-44961ad3afce","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5b77d9a-97fc-4728-b7ee-44961ad3afce","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5b77d9a-97fc-4728-b7ee-44961ad3afce","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-7ee350/rate-test-model-7ee350\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-7ee350/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d5b77d9a-97fc-4728-b7ee-44961ad3afce","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:55:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5b77d9a-97fc-4728-b7ee-44961ad3afce","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T00:55:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5b77d9a-97fc-4728-b7ee-44961ad3afce","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-903544"} {"level":"debug","ts":"2026-07-16T00:55:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5b77d9a-97fc-4728-b7ee-44961ad3afce","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T00:55:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d5b77d9a-97fc-4728-b7ee-44961ad3afce","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"110ef446-267e-4371-a5c7-9a1612060f14","keyName":"e2e-rate-a-903544","selected_subscription":"e2e-rate-iso-a-903544","selected_subscription_key":"ai-tenant-e2e-shared-a-7ee350/e2e-rate-iso-a-903544@ai-tenant-e2e-shared-a-7ee350/rate-test-model-7ee350","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7ee350","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-903544","namespace":"ai-tenant-e2e-shared-a-7ee350","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T00:55:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5b77d9a-97fc-4728-b7ee-44961ad3afce","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T00:55:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d5b77d9a-97fc-4728-b7ee-44961ad3afce","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T00:55:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a7fee11c-b41b-4da1-852d-dc817d3aff67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38402","PortSpecifier":{"PortValue":38402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a7fee11c-b41b-4da1-852d-dc817d3aff67","method":"POST","path":"/ai-tenant-e2e-shared-b-07a8dc/rate-test-model-07a8dc/v1/completions","host":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-16T00:55:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a7fee11c-b41b-4da1-852d-dc817d3aff67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.12:38402","PortSpecifier":{"PortValue":38402}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784163319,"nanos":597108918},"http":{"id":"a7fee11c-b41b-4da1-852d-dc817d3aff67","method":"POST","headers":{":authority":"e2e-shared-b-07a8dc.apps.34c5a9a1-a8ca-4ee5-87e4-fd408835caca.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-07a8dc/rate-test-model-07a8dc/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:55:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a7fee11c-b41b-4da1-852d-dc817d3aff67","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-w5a55BYHJ8jSykXh_oBQa86JtmCLNDE5vevoVUkLOwRbid2XJuWBLwK4M381"} {"level":"debug","ts":"2026-07-16T00:55:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a7fee11c-b41b-4da1-852d-dc817d3aff67","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-07a8dc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-w5a55BYHJ8jSykXh_oBQa86JtmCLNDE5vevoVUkLOwRbid2XJuWBLwK4M381\"}"} {"level":"debug","ts":"2026-07-16T00:55:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a7fee11c-b41b-4da1-852d-dc817d3aff67","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-07a8dc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"57e2374c-3213-4fcd-8eb6-bf2dda2658d6","keyName":"e2e-rate-b-903544","subscription":"e2e-rate-iso-b-903544","tenant":"e2e-shared-b-07a8dc","userId":"57e2374c-3213-4fcd-8eb6-bf2dda2658d6","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-16T00:55:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a7fee11c-b41b-4da1-852d-dc817d3aff67","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-07a8dc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-07a8dc/rate-test-model-07a8dc\",\"requestedSubscription\":\"e2e-rate-iso-b-903544\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-16T00:55:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a7fee11c-b41b-4da1-852d-dc817d3aff67","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-07a8dc.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-07a8dc","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-903544","namespace":"ai-tenant-e2e-shared-b-07a8dc","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-16T00:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a7fee11c-b41b-4da1-852d-dc817d3aff67","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-16T00:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7fee11c-b41b-4da1-852d-dc817d3aff67","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7fee11c-b41b-4da1-852d-dc817d3aff67","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7fee11c-b41b-4da1-852d-dc817d3aff67","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:55:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7fee11c-b41b-4da1-852d-dc817d3aff67","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-07a8dc/rate-test-model-07a8dc\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-07a8dc/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-16T00:55:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7fee11c-b41b-4da1-852d-dc817d3aff67","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-16T00:55:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7fee11c-b41b-4da1-852d-dc817d3aff67","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-16T00:55:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7fee11c-b41b-4da1-852d-dc817d3aff67","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-903544"} {"level":"debug","ts":"2026-07-16T00:55:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7fee11c-b41b-4da1-852d-dc817d3aff67","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"57e2374c-3213-4fcd-8eb6-bf2dda2658d6","keyName":"e2e-rate-b-903544","selected_subscription":"e2e-rate-iso-b-903544","selected_subscription_key":"ai-tenant-e2e-shared-b-07a8dc/e2e-rate-iso-b-903544@ai-tenant-e2e-shared-b-07a8dc/rate-test-model-07a8dc","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-07a8dc","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-903544","namespace":"ai-tenant-e2e-shared-b-07a8dc","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-16T00:55:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a7fee11c-b41b-4da1-852d-dc817d3aff67","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-16T00:55:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a7fee11c-b41b-4da1-852d-dc817d3aff67","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-16T00:55:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5aa9b97ea097e39861314b7d2b8e3ec2460fcccc4a54c92fcf8d4ce5a2dbf460"} {"level":"info","ts":"2026-07-16T00:55:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3fc65bcaff8617c02feb40af18be72c4ff357666c9865028905d03f1b478554e"} {"level":"info","ts":"2026-07-16T00:55:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be5640e5339d705bc4ff81169d7201a27741e6d7cec1b4e28c07fdb053c8e71c"} {"level":"info","ts":"2026-07-16T00:55:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dadbecf86f9b60d2bba66b8310bb1d70baba6bf225ec1eb3ffb91ac58c70c1a6"} {"level":"info","ts":"2026-07-16T00:55:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c84f7c66de8c8454507a98a12a0a3d0d6d7169b173ecfaeabf65413052d5724c"} {"level":"info","ts":"2026-07-16T00:55:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/399d0fbb349305207c2c32438548314c61fc44a9f6f4bac54ff5f5d859bb7e08"} {"level":"info","ts":"2026-07-16T00:55:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0368acd86bb4ffdf76c1085168fd2b9feb2208814041fe3ed30425112c86c8e1"} {"level":"info","ts":"2026-07-16T00:55:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/336abef3da833abf41409832aea00c74be412c3ad62d13001babcba907f6dbbf"} {"level":"info","ts":"2026-07-16T00:55:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3530209182ab992f02febaa0c1e03c185087e37ceac7185cebfe38cd4bf7c3b5"} {"level":"info","ts":"2026-07-16T00:55:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f53fc36023191bf137d1fe03523de867904a6c9388c41a0e9a3bfb203b2c140c"} {"level":"info","ts":"2026-07-16T00:55:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9fdc777eef7ef9661111afdef90ebbf39ce8fa87c85c7a2d15d71a4959392a3b"} {"level":"info","ts":"2026-07-16T00:55:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c6789436c0d86c4e6ccad888b8d934eb3079ebfb4a09f588580505b9a203b2ea"} {"level":"info","ts":"2026-07-16T00:55:35Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed8cc92517938e5d112e42b83a491f2570bfd0947bb84a9fef8703b06a6ee982"} {"level":"info","ts":"2026-07-16T00:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fe90abb69ebaa6cdfee9c92e3cbba96526988fbb7ecc2abc35793a50c198a9f2"} {"level":"info","ts":"2026-07-16T00:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58dbf8c617dfad61bd0c643afc38bae2c840c051268e48f0d6fc97ace39f0f7c"} {"level":"info","ts":"2026-07-16T00:55:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54648820c38fe8bbcc986f9f35361d32460d86d36edfe2ad3a9894865c2d59f4"} {"level":"info","ts":"2026-07-16T00:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/253411cb8ec518faed077c3c98ede35efc9ab5c246f46f011576d39b04279398"} {"level":"info","ts":"2026-07-16T00:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/81d119224f966ca241ce4ff6c3c9859a137576d818497b322941cf22c1858dbd"} {"level":"info","ts":"2026-07-16T00:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ec40d5195356941429f8fe254d568524a996761a39a727ffbd6d5fb44fd37a8"} {"level":"info","ts":"2026-07-16T00:55:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/48bd9d200cdbb4104ef6fa148ee0c7098ff175f5628ee7c2720899b35a472624"}