--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-22T02:25:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe"} {"level":"info","ts":"2026-07-22T02:25:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"} {"level":"debug","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2"} {"level":"debug","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2"} {"level":"debug","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2"} {"level":"debug","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6"} {"level":"debug","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6"} {"level":"debug","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6"} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6"} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6"} {"level":"error","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"} {"level":"debug","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6"} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"} {"level":"debug","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe"} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe"} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe"} {"level":"debug","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f"} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f"} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe"} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f"} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f"} {"level":"info","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:25:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f"} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f"} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f"} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11663a379f7e5e16ff24a73270582ffdee5571619035780210920772ff7bcc82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11663a379f7e5e16ff24a73270582ffdee5571619035780210920772ff7bcc82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f"} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11663a379f7e5e16ff24a73270582ffdee5571619035780210920772ff7bcc82"} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11663a379f7e5e16ff24a73270582ffdee5571619035780210920772ff7bcc82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11663a379f7e5e16ff24a73270582ffdee5571619035780210920772ff7bcc82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f"} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11663a379f7e5e16ff24a73270582ffdee5571619035780210920772ff7bcc82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11663a379f7e5e16ff24a73270582ffdee5571619035780210920772ff7bcc82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11663a379f7e5e16ff24a73270582ffdee5571619035780210920772ff7bcc82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11663a379f7e5e16ff24a73270582ffdee5571619035780210920772ff7bcc82","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11663a379f7e5e16ff24a73270582ffdee5571619035780210920772ff7bcc82"} {"level":"debug","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11663a379f7e5e16ff24a73270582ffdee5571619035780210920772ff7bcc82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11663a379f7e5e16ff24a73270582ffdee5571619035780210920772ff7bcc82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f"} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11663a379f7e5e16ff24a73270582ffdee5571619035780210920772ff7bcc82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11663a379f7e5e16ff24a73270582ffdee5571619035780210920772ff7bcc82"} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11663a379f7e5e16ff24a73270582ffdee5571619035780210920772ff7bcc82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48"} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11663a379f7e5e16ff24a73270582ffdee5571619035780210920772ff7bcc82"} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48"} {"level":"debug","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48"} {"level":"debug","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48"} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423"} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"339a8498b859a4b4b57f24e5b31ecf0572ba0c555d27816768c0481fe2811ad4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"339a8498b859a4b4b57f24e5b31ecf0572ba0c555d27816768c0481fe2811ad4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/339a8498b859a4b4b57f24e5b31ecf0572ba0c555d27816768c0481fe2811ad4"} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"905da1aec274c72a27f3995b409c99d3df5c16b98265f66d4f035b2ec03efe23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"905da1aec274c72a27f3995b409c99d3df5c16b98265f66d4f035b2ec03efe23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"069d0ee78b942cf6c15f7f6a4f49adfbc9f09ae4ae273352d8b0ba4a2dabc093","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"069d0ee78b942cf6c15f7f6a4f49adfbc9f09ae4ae273352d8b0ba4a2dabc093","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"339a8498b859a4b4b57f24e5b31ecf0572ba0c555d27816768c0481fe2811ad4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["339a8498b859a4b4b57f24e5b31ecf0572ba0c555d27816768c0481fe2811ad4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423"} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"339a8498b859a4b4b57f24e5b31ecf0572ba0c555d27816768c0481fe2811ad4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"905da1aec274c72a27f3995b409c99d3df5c16b98265f66d4f035b2ec03efe23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/905da1aec274c72a27f3995b409c99d3df5c16b98265f66d4f035b2ec03efe23"} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"905da1aec274c72a27f3995b409c99d3df5c16b98265f66d4f035b2ec03efe23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"069d0ee78b942cf6c15f7f6a4f49adfbc9f09ae4ae273352d8b0ba4a2dabc093","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"069d0ee78b942cf6c15f7f6a4f49adfbc9f09ae4ae273352d8b0ba4a2dabc093","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"339a8498b859a4b4b57f24e5b31ecf0572ba0c555d27816768c0481fe2811ad4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"905da1aec274c72a27f3995b409c99d3df5c16b98265f66d4f035b2ec03efe23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["905da1aec274c72a27f3995b409c99d3df5c16b98265f66d4f035b2ec03efe23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/069d0ee78b942cf6c15f7f6a4f49adfbc9f09ae4ae273352d8b0ba4a2dabc093"} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"905da1aec274c72a27f3995b409c99d3df5c16b98265f66d4f035b2ec03efe23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"069d0ee78b942cf6c15f7f6a4f49adfbc9f09ae4ae273352d8b0ba4a2dabc093","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:25:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["069d0ee78b942cf6c15f7f6a4f49adfbc9f09ae4ae273352d8b0ba4a2dabc093"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/339a8498b859a4b4b57f24e5b31ecf0572ba0c555d27816768c0481fe2811ad4"} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"069d0ee78b942cf6c15f7f6a4f49adfbc9f09ae4ae273352d8b0ba4a2dabc093","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"905da1aec274c72a27f3995b409c99d3df5c16b98265f66d4f035b2ec03efe23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"069d0ee78b942cf6c15f7f6a4f49adfbc9f09ae4ae273352d8b0ba4a2dabc093","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423"} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/905da1aec274c72a27f3995b409c99d3df5c16b98265f66d4f035b2ec03efe23"} {"level":"info","ts":"2026-07-22T02:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/069d0ee78b942cf6c15f7f6a4f49adfbc9f09ae4ae273352d8b0ba4a2dabc093"} {"level":"info","ts":"2026-07-22T02:25:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"531d9cd9-8f4a-48cd-91b0-a04a3142ab9a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44368","PortSpecifier":{"PortValue":44368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"531d9cd9-8f4a-48cd-91b0-a04a3142ab9a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:25:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"531d9cd9-8f4a-48cd-91b0-a04a3142ab9a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44368","PortSpecifier":{"PortValue":44368}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687125,"nanos":956141388},"http":{"id":"531d9cd9-8f4a-48cd-91b0-a04a3142ab9a","method":"POST","headers":{":authority":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:25:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"531d9cd9-8f4a-48cd-91b0-a04a3142ab9a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:25:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"531d9cd9-8f4a-48cd-91b0-a04a3142ab9a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea87c7df-7d44-4a6d-a086-2850f9733702","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d0ea8cc2-7b86-4b0b-bbc0-db31674de9e3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe8ebd588071"]}} {"level":"debug","ts":"2026-07-22T02:25:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"531d9cd9-8f4a-48cd-91b0-a04a3142ab9a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe8ebd588071"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d0ea8cc2-7b86-4b0b-bbc0-db31674de9e3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea87c7df-7d44-4a6d-a086-2850f9733702","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:25:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"531d9cd9-8f4a-48cd-91b0-a04a3142ab9a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:25:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"531d9cd9-8f4a-48cd-91b0-a04a3142ab9a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:25:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"531d9cd9-8f4a-48cd-91b0-a04a3142ab9a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-000830/auth-test-model-000830\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-000830/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:25:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"531d9cd9-8f4a-48cd-91b0-a04a3142ab9a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:25:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"531d9cd9-8f4a-48cd-91b0-a04a3142ab9a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:25:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"531d9cd9-8f4a-48cd-91b0-a04a3142ab9a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:25:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"531d9cd9-8f4a-48cd-91b0-a04a3142ab9a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:25:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"531d9cd9-8f4a-48cd-91b0-a04a3142ab9a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:25:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21b1d7ed-6d56-4c1a-83ee-ff03872bc8e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43250","PortSpecifier":{"PortValue":43250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"21b1d7ed-6d56-4c1a-83ee-ff03872bc8e7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7eead4.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:25:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21b1d7ed-6d56-4c1a-83ee-ff03872bc8e7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43250","PortSpecifier":{"PortValue":43250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687125,"nanos":999815043},"http":{"id":"21b1d7ed-6d56-4c1a-83ee-ff03872bc8e7","method":"POST","headers":{":authority":"e2e-shared-b-7eead4.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:25:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"21b1d7ed-6d56-4c1a-83ee-ff03872bc8e7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:25:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"21b1d7ed-6d56-4c1a-83ee-ff03872bc8e7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea87c7df-7d44-4a6d-a086-2850f9733702","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d0ea8cc2-7b86-4b0b-bbc0-db31674de9e3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe8ebd588071"]}} {"level":"debug","ts":"2026-07-22T02:25:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"21b1d7ed-6d56-4c1a-83ee-ff03872bc8e7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe8ebd588071"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d0ea8cc2-7b86-4b0b-bbc0-db31674de9e3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea87c7df-7d44-4a6d-a086-2850f9733702","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7eead4.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:25:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21b1d7ed-6d56-4c1a-83ee-ff03872bc8e7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:25:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21b1d7ed-6d56-4c1a-83ee-ff03872bc8e7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:25:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21b1d7ed-6d56-4c1a-83ee-ff03872bc8e7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7eead4/auth-test-model-7eead4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7eead4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:25:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"21b1d7ed-6d56-4c1a-83ee-ff03872bc8e7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:25:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21b1d7ed-6d56-4c1a-83ee-ff03872bc8e7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:25:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21b1d7ed-6d56-4c1a-83ee-ff03872bc8e7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:25:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21b1d7ed-6d56-4c1a-83ee-ff03872bc8e7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:25:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21b1d7ed-6d56-4c1a-83ee-ff03872bc8e7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:25:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89457c5f-ed04-40e7-9134-ff98ee99081a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44384","PortSpecifier":{"PortValue":44384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"89457c5f-ed04-40e7-9134-ff98ee99081a","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:25:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"89457c5f-ed04-40e7-9134-ff98ee99081a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:44384","PortSpecifier":{"PortValue":44384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687126,"nanos":38425455},"http":{"id":"89457c5f-ed04-40e7-9134-ff98ee99081a","method":"POST","headers":{":authority":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:25:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"89457c5f-ed04-40e7-9134-ff98ee99081a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:25:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"89457c5f-ed04-40e7-9134-ff98ee99081a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea87c7df-7d44-4a6d-a086-2850f9733702","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d0ea8cc2-7b86-4b0b-bbc0-db31674de9e3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe8ebd588071"]}} {"level":"debug","ts":"2026-07-22T02:25:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"89457c5f-ed04-40e7-9134-ff98ee99081a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe8ebd588071"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d0ea8cc2-7b86-4b0b-bbc0-db31674de9e3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea87c7df-7d44-4a6d-a086-2850f9733702","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:25:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89457c5f-ed04-40e7-9134-ff98ee99081a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:25:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89457c5f-ed04-40e7-9134-ff98ee99081a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:25:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"89457c5f-ed04-40e7-9134-ff98ee99081a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-000830/auth-test-model-000830\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-000830/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:25:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"89457c5f-ed04-40e7-9134-ff98ee99081a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:25:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89457c5f-ed04-40e7-9134-ff98ee99081a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:25:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"89457c5f-ed04-40e7-9134-ff98ee99081a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:25:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89457c5f-ed04-40e7-9134-ff98ee99081a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:25:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"89457c5f-ed04-40e7-9134-ff98ee99081a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:25:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a332d441-2f5f-4987-82e8-7ad7cb103b07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43260","PortSpecifier":{"PortValue":43260}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a332d441-2f5f-4987-82e8-7ad7cb103b07","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-7eead4.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:25:26Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a332d441-2f5f-4987-82e8-7ad7cb103b07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:43260","PortSpecifier":{"PortValue":43260}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687126,"nanos":75362914},"http":{"id":"a332d441-2f5f-4987-82e8-7ad7cb103b07","method":"POST","headers":{":authority":"e2e-shared-b-7eead4.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:25:26Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a332d441-2f5f-4987-82e8-7ad7cb103b07","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:25:26Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a332d441-2f5f-4987-82e8-7ad7cb103b07","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea87c7df-7d44-4a6d-a086-2850f9733702","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d0ea8cc2-7b86-4b0b-bbc0-db31674de9e3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe8ebd588071"]}} {"level":"debug","ts":"2026-07-22T02:25:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a332d441-2f5f-4987-82e8-7ad7cb103b07","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe8ebd588071"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d0ea8cc2-7b86-4b0b-bbc0-db31674de9e3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea87c7df-7d44-4a6d-a086-2850f9733702","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7eead4.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:25:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a332d441-2f5f-4987-82e8-7ad7cb103b07","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:25:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a332d441-2f5f-4987-82e8-7ad7cb103b07","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:25:26Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a332d441-2f5f-4987-82e8-7ad7cb103b07","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7eead4/auth-test-model-7eead4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7eead4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:25:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a332d441-2f5f-4987-82e8-7ad7cb103b07","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:25:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a332d441-2f5f-4987-82e8-7ad7cb103b07","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:25:26Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a332d441-2f5f-4987-82e8-7ad7cb103b07","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:25:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a332d441-2f5f-4987-82e8-7ad7cb103b07","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:25:26Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a332d441-2f5f-4987-82e8-7ad7cb103b07","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423"} {"level":"info","ts":"2026-07-22T02:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/339a8498b859a4b4b57f24e5b31ecf0572ba0c555d27816768c0481fe2811ad4"} {"level":"info","ts":"2026-07-22T02:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/069d0ee78b942cf6c15f7f6a4f49adfbc9f09ae4ae273352d8b0ba4a2dabc093"} {"level":"info","ts":"2026-07-22T02:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/905da1aec274c72a27f3995b409c99d3df5c16b98265f66d4f035b2ec03efe23"} {"level":"info","ts":"2026-07-22T02:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"} {"level":"info","ts":"2026-07-22T02:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48"} {"level":"info","ts":"2026-07-22T02:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe"} {"level":"info","ts":"2026-07-22T02:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11663a379f7e5e16ff24a73270582ffdee5571619035780210920772ff7bcc82"} {"level":"info","ts":"2026-07-22T02:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6"} {"level":"info","ts":"2026-07-22T02:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f"} {"level":"info","ts":"2026-07-22T02:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f"} {"level":"info","ts":"2026-07-22T02:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2"} {"level":"debug","ts":"2026-07-22T02:25:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2"} {"level":"info","ts":"2026-07-22T02:25:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:25:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:25:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2"} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2"} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2"} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2"} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423"} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2"} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423"} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423"} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe"} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2"} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423"} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe"} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6"} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6"} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48"} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6"} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48"} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48"} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f"} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6"} {"level":"error","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f"} {"level":"error","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f"} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"069d0ee78b942cf6c15f7f6a4f49adfbc9f09ae4ae273352d8b0ba4a2dabc093","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"069d0ee78b942cf6c15f7f6a4f49adfbc9f09ae4ae273352d8b0ba4a2dabc093","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"069d0ee78b942cf6c15f7f6a4f49adfbc9f09ae4ae273352d8b0ba4a2dabc093","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/069d0ee78b942cf6c15f7f6a4f49adfbc9f09ae4ae273352d8b0ba4a2dabc093"} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"069d0ee78b942cf6c15f7f6a4f49adfbc9f09ae4ae273352d8b0ba4a2dabc093","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"069d0ee78b942cf6c15f7f6a4f49adfbc9f09ae4ae273352d8b0ba4a2dabc093","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"069d0ee78b942cf6c15f7f6a4f49adfbc9f09ae4ae273352d8b0ba4a2dabc093","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"069d0ee78b942cf6c15f7f6a4f49adfbc9f09ae4ae273352d8b0ba4a2dabc093\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"069d0ee78b942cf6c15f7f6a4f49adfbc9f09ae4ae273352d8b0ba4a2dabc093","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"069d0ee78b942cf6c15f7f6a4f49adfbc9f09ae4ae273352d8b0ba4a2dabc093","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/069d0ee78b942cf6c15f7f6a4f49adfbc9f09ae4ae273352d8b0ba4a2dabc093"} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/069d0ee78b942cf6c15f7f6a4f49adfbc9f09ae4ae273352d8b0ba4a2dabc093"} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f"} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f"} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"905da1aec274c72a27f3995b409c99d3df5c16b98265f66d4f035b2ec03efe23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f"} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"905da1aec274c72a27f3995b409c99d3df5c16b98265f66d4f035b2ec03efe23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"069d0ee78b942cf6c15f7f6a4f49adfbc9f09ae4ae273352d8b0ba4a2dabc093","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["069d0ee78b942cf6c15f7f6a4f49adfbc9f09ae4ae273352d8b0ba4a2dabc093"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/905da1aec274c72a27f3995b409c99d3df5c16b98265f66d4f035b2ec03efe23"} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"069d0ee78b942cf6c15f7f6a4f49adfbc9f09ae4ae273352d8b0ba4a2dabc093","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11663a379f7e5e16ff24a73270582ffdee5571619035780210920772ff7bcc82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11663a379f7e5e16ff24a73270582ffdee5571619035780210920772ff7bcc82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"339a8498b859a4b4b57f24e5b31ecf0572ba0c555d27816768c0481fe2811ad4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11663a379f7e5e16ff24a73270582ffdee5571619035780210920772ff7bcc82"} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"339a8498b859a4b4b57f24e5b31ecf0572ba0c555d27816768c0481fe2811ad4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"905da1aec274c72a27f3995b409c99d3df5c16b98265f66d4f035b2ec03efe23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["905da1aec274c72a27f3995b409c99d3df5c16b98265f66d4f035b2ec03efe23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"905da1aec274c72a27f3995b409c99d3df5c16b98265f66d4f035b2ec03efe23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"069d0ee78b942cf6c15f7f6a4f49adfbc9f09ae4ae273352d8b0ba4a2dabc093","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11663a379f7e5e16ff24a73270582ffdee5571619035780210920772ff7bcc82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11663a379f7e5e16ff24a73270582ffdee5571619035780210920772ff7bcc82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f"} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11663a379f7e5e16ff24a73270582ffdee5571619035780210920772ff7bcc82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"339a8498b859a4b4b57f24e5b31ecf0572ba0c555d27816768c0481fe2811ad4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"905da1aec274c72a27f3995b409c99d3df5c16b98265f66d4f035b2ec03efe23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11663a379f7e5e16ff24a73270582ffdee5571619035780210920772ff7bcc82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"339a8498b859a4b4b57f24e5b31ecf0572ba0c555d27816768c0481fe2811ad4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f"} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"339a8498b859a4b4b57f24e5b31ecf0572ba0c555d27816768c0481fe2811ad4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/339a8498b859a4b4b57f24e5b31ecf0572ba0c555d27816768c0481fe2811ad4"} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"339a8498b859a4b4b57f24e5b31ecf0572ba0c555d27816768c0481fe2811ad4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"339a8498b859a4b4b57f24e5b31ecf0572ba0c555d27816768c0481fe2811ad4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:25:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["339a8498b859a4b4b57f24e5b31ecf0572ba0c555d27816768c0481fe2811ad4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/905da1aec274c72a27f3995b409c99d3df5c16b98265f66d4f035b2ec03efe23"} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"339a8498b859a4b4b57f24e5b31ecf0572ba0c555d27816768c0481fe2811ad4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"339a8498b859a4b4b57f24e5b31ecf0572ba0c555d27816768c0481fe2811ad4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:25:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/069d0ee78b942cf6c15f7f6a4f49adfbc9f09ae4ae273352d8b0ba4a2dabc093"} {"level":"debug","ts":"2026-07-22T02:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"339a8498b859a4b4b57f24e5b31ecf0572ba0c555d27816768c0481fe2811ad4","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11663a379f7e5e16ff24a73270582ffdee5571619035780210920772ff7bcc82"} {"level":"info","ts":"2026-07-22T02:25:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/339a8498b859a4b4b57f24e5b31ecf0572ba0c555d27816768c0481fe2811ad4"} {"level":"info","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6914f283-5357-480d-bff5-43cfeeac29cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38616","PortSpecifier":{"PortValue":38616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6914f283-5357-480d-bff5-43cfeeac29cb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6914f283-5357-480d-bff5-43cfeeac29cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38616","PortSpecifier":{"PortValue":38616}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687143,"nanos":393454208},"http":{"id":"6914f283-5357-480d-bff5-43cfeeac29cb","method":"POST","headers":{":authority":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6914f283-5357-480d-bff5-43cfeeac29cb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6914f283-5357-480d-bff5-43cfeeac29cb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea87c7df-7d44-4a6d-a086-2850f9733702","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d0ea8cc2-7b86-4b0b-bbc0-db31674de9e3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe8ebd588071"]}} {"level":"debug","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6914f283-5357-480d-bff5-43cfeeac29cb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe8ebd588071"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d0ea8cc2-7b86-4b0b-bbc0-db31674de9e3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea87c7df-7d44-4a6d-a086-2850f9733702","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6914f283-5357-480d-bff5-43cfeeac29cb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6914f283-5357-480d-bff5-43cfeeac29cb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6914f283-5357-480d-bff5-43cfeeac29cb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-000830/auth-test-model-000830\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-000830/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6914f283-5357-480d-bff5-43cfeeac29cb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6914f283-5357-480d-bff5-43cfeeac29cb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6914f283-5357-480d-bff5-43cfeeac29cb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6914f283-5357-480d-bff5-43cfeeac29cb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6914f283-5357-480d-bff5-43cfeeac29cb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1fdf098c-2147-49b8-b720-e35791b3199d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60194","PortSpecifier":{"PortValue":60194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1fdf098c-2147-49b8-b720-e35791b3199d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7eead4.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1fdf098c-2147-49b8-b720-e35791b3199d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60194","PortSpecifier":{"PortValue":60194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687143,"nanos":428431825},"http":{"id":"1fdf098c-2147-49b8-b720-e35791b3199d","method":"POST","headers":{":authority":"e2e-shared-b-7eead4.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1fdf098c-2147-49b8-b720-e35791b3199d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1fdf098c-2147-49b8-b720-e35791b3199d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea87c7df-7d44-4a6d-a086-2850f9733702","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d0ea8cc2-7b86-4b0b-bbc0-db31674de9e3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe8ebd588071"]}} {"level":"debug","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1fdf098c-2147-49b8-b720-e35791b3199d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe8ebd588071"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d0ea8cc2-7b86-4b0b-bbc0-db31674de9e3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea87c7df-7d44-4a6d-a086-2850f9733702","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7eead4.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fdf098c-2147-49b8-b720-e35791b3199d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fdf098c-2147-49b8-b720-e35791b3199d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1fdf098c-2147-49b8-b720-e35791b3199d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7eead4/auth-test-model-7eead4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7eead4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1fdf098c-2147-49b8-b720-e35791b3199d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1fdf098c-2147-49b8-b720-e35791b3199d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1fdf098c-2147-49b8-b720-e35791b3199d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1fdf098c-2147-49b8-b720-e35791b3199d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1fdf098c-2147-49b8-b720-e35791b3199d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e79efbf-ae86-4071-ad2a-72f917514315","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60198","PortSpecifier":{"PortValue":60198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9e79efbf-ae86-4071-ad2a-72f917514315","method":"GET","path":"/maas-api/v1/api-keys/c0297452-8171-4280-9b0f-951742ebd5bf","host":"e2e-shared-b-7eead4.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e79efbf-ae86-4071-ad2a-72f917514315","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60198","PortSpecifier":{"PortValue":60198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687143,"nanos":469342746},"http":{"id":"9e79efbf-ae86-4071-ad2a-72f917514315","method":"GET","headers":{":authority":"e2e-shared-b-7eead4.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c0297452-8171-4280-9b0f-951742ebd5bf",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9e79efbf-ae86-4071-ad2a-72f917514315","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9e79efbf-ae86-4071-ad2a-72f917514315","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea87c7df-7d44-4a6d-a086-2850f9733702","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d0ea8cc2-7b86-4b0b-bbc0-db31674de9e3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe8ebd588071"]}} {"level":"debug","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9e79efbf-ae86-4071-ad2a-72f917514315","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe8ebd588071"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d0ea8cc2-7b86-4b0b-bbc0-db31674de9e3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea87c7df-7d44-4a6d-a086-2850f9733702","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7eead4.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c0297452-8171-4280-9b0f-951742ebd5bf",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e79efbf-ae86-4071-ad2a-72f917514315","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e79efbf-ae86-4071-ad2a-72f917514315","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e79efbf-ae86-4071-ad2a-72f917514315","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7eead4/auth-test-model-7eead4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7eead4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9e79efbf-ae86-4071-ad2a-72f917514315","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e79efbf-ae86-4071-ad2a-72f917514315","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e79efbf-ae86-4071-ad2a-72f917514315","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e79efbf-ae86-4071-ad2a-72f917514315","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e79efbf-ae86-4071-ad2a-72f917514315","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7053def-757f-4012-a247-1cfb5a1f0fa5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38632","PortSpecifier":{"PortValue":38632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e7053def-757f-4012-a247-1cfb5a1f0fa5","method":"GET","path":"/maas-api/v1/api-keys/c0297452-8171-4280-9b0f-951742ebd5bf","host":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7053def-757f-4012-a247-1cfb5a1f0fa5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:38632","PortSpecifier":{"PortValue":38632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687143,"nanos":502168491},"http":{"id":"e7053def-757f-4012-a247-1cfb5a1f0fa5","method":"GET","headers":{":authority":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c0297452-8171-4280-9b0f-951742ebd5bf",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e7053def-757f-4012-a247-1cfb5a1f0fa5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e7053def-757f-4012-a247-1cfb5a1f0fa5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea87c7df-7d44-4a6d-a086-2850f9733702","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d0ea8cc2-7b86-4b0b-bbc0-db31674de9e3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe8ebd588071"]}} {"level":"debug","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e7053def-757f-4012-a247-1cfb5a1f0fa5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe8ebd588071"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d0ea8cc2-7b86-4b0b-bbc0-db31674de9e3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea87c7df-7d44-4a6d-a086-2850f9733702","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c0297452-8171-4280-9b0f-951742ebd5bf",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7053def-757f-4012-a247-1cfb5a1f0fa5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7053def-757f-4012-a247-1cfb5a1f0fa5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7053def-757f-4012-a247-1cfb5a1f0fa5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-000830/auth-test-model-000830\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-000830/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e7053def-757f-4012-a247-1cfb5a1f0fa5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7053def-757f-4012-a247-1cfb5a1f0fa5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7053def-757f-4012-a247-1cfb5a1f0fa5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7053def-757f-4012-a247-1cfb5a1f0fa5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:25:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7053def-757f-4012-a247-1cfb5a1f0fa5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:25:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/339a8498b859a4b4b57f24e5b31ecf0572ba0c555d27816768c0481fe2811ad4"} {"level":"info","ts":"2026-07-22T02:25:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48"} {"level":"info","ts":"2026-07-22T02:25:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe"} {"level":"info","ts":"2026-07-22T02:25:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2"} {"level":"info","ts":"2026-07-22T02:25:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/069d0ee78b942cf6c15f7f6a4f49adfbc9f09ae4ae273352d8b0ba4a2dabc093"} {"level":"info","ts":"2026-07-22T02:25:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"} {"level":"info","ts":"2026-07-22T02:25:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f"} {"level":"info","ts":"2026-07-22T02:25:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11663a379f7e5e16ff24a73270582ffdee5571619035780210920772ff7bcc82"} {"level":"info","ts":"2026-07-22T02:25:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6"} {"level":"info","ts":"2026-07-22T02:25:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423"} {"level":"info","ts":"2026-07-22T02:25:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f"} {"level":"info","ts":"2026-07-22T02:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/905da1aec274c72a27f3995b409c99d3df5c16b98265f66d4f035b2ec03efe23"} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"905da1aec274c72a27f3995b409c99d3df5c16b98265f66d4f035b2ec03efe23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"905da1aec274c72a27f3995b409c99d3df5c16b98265f66d4f035b2ec03efe23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"905da1aec274c72a27f3995b409c99d3df5c16b98265f66d4f035b2ec03efe23","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/905da1aec274c72a27f3995b409c99d3df5c16b98265f66d4f035b2ec03efe23"} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"905da1aec274c72a27f3995b409c99d3df5c16b98265f66d4f035b2ec03efe23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"905da1aec274c72a27f3995b409c99d3df5c16b98265f66d4f035b2ec03efe23","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/905da1aec274c72a27f3995b409c99d3df5c16b98265f66d4f035b2ec03efe23"} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"905da1aec274c72a27f3995b409c99d3df5c16b98265f66d4f035b2ec03efe23","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["905da1aec274c72a27f3995b409c99d3df5c16b98265f66d4f035b2ec03efe23"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"905da1aec274c72a27f3995b409c99d3df5c16b98265f66d4f035b2ec03efe23","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"905da1aec274c72a27f3995b409c99d3df5c16b98265f66d4f035b2ec03efe23","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/905da1aec274c72a27f3995b409c99d3df5c16b98265f66d4f035b2ec03efe23"} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe"} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe"} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe"} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6"} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6"} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423"} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423"} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6"} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423"} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6"} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423"} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48"} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f"} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"069d0ee78b942cf6c15f7f6a4f49adfbc9f09ae4ae273352d8b0ba4a2dabc093","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6"} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"069d0ee78b942cf6c15f7f6a4f49adfbc9f09ae4ae273352d8b0ba4a2dabc093","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"069d0ee78b942cf6c15f7f6a4f49adfbc9f09ae4ae273352d8b0ba4a2dabc093","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423"} {"level":"error","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"069d0ee78b942cf6c15f7f6a4f49adfbc9f09ae4ae273352d8b0ba4a2dabc093","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48"} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"069d0ee78b942cf6c15f7f6a4f49adfbc9f09ae4ae273352d8b0ba4a2dabc093","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"069d0ee78b942cf6c15f7f6a4f49adfbc9f09ae4ae273352d8b0ba4a2dabc093","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"069d0ee78b942cf6c15f7f6a4f49adfbc9f09ae4ae273352d8b0ba4a2dabc093","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/069d0ee78b942cf6c15f7f6a4f49adfbc9f09ae4ae273352d8b0ba4a2dabc093"} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"339a8498b859a4b4b57f24e5b31ecf0572ba0c555d27816768c0481fe2811ad4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f"} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"339a8498b859a4b4b57f24e5b31ecf0572ba0c555d27816768c0481fe2811ad4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/069d0ee78b942cf6c15f7f6a4f49adfbc9f09ae4ae273352d8b0ba4a2dabc093"} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"339a8498b859a4b4b57f24e5b31ecf0572ba0c555d27816768c0481fe2811ad4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"339a8498b859a4b4b57f24e5b31ecf0572ba0c555d27816768c0481fe2811ad4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"069d0ee78b942cf6c15f7f6a4f49adfbc9f09ae4ae273352d8b0ba4a2dabc093","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:26:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["069d0ee78b942cf6c15f7f6a4f49adfbc9f09ae4ae273352d8b0ba4a2dabc093"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/339a8498b859a4b4b57f24e5b31ecf0572ba0c555d27816768c0481fe2811ad4"} {"level":"info","ts":"2026-07-22T02:26:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"069d0ee78b942cf6c15f7f6a4f49adfbc9f09ae4ae273352d8b0ba4a2dabc093","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11663a379f7e5e16ff24a73270582ffdee5571619035780210920772ff7bcc82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2"} {"level":"info","ts":"2026-07-22T02:26:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11663a379f7e5e16ff24a73270582ffdee5571619035780210920772ff7bcc82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:26:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:26:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11663a379f7e5e16ff24a73270582ffdee5571619035780210920772ff7bcc82"} {"level":"info","ts":"2026-07-22T02:26:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"339a8498b859a4b4b57f24e5b31ecf0572ba0c555d27816768c0481fe2811ad4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:26:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:26:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["339a8498b859a4b4b57f24e5b31ecf0572ba0c555d27816768c0481fe2811ad4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"} {"level":"info","ts":"2026-07-22T02:26:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"339a8498b859a4b4b57f24e5b31ecf0572ba0c555d27816768c0481fe2811ad4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"069d0ee78b942cf6c15f7f6a4f49adfbc9f09ae4ae273352d8b0ba4a2dabc093","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11663a379f7e5e16ff24a73270582ffdee5571619035780210920772ff7bcc82","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:26:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:26:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11663a379f7e5e16ff24a73270582ffdee5571619035780210920772ff7bcc82"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/339a8498b859a4b4b57f24e5b31ecf0572ba0c555d27816768c0481fe2811ad4"} {"level":"info","ts":"2026-07-22T02:26:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11663a379f7e5e16ff24a73270582ffdee5571619035780210920772ff7bcc82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:26:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:26:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f"} {"level":"info","ts":"2026-07-22T02:26:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"339a8498b859a4b4b57f24e5b31ecf0572ba0c555d27816768c0481fe2811ad4","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:26:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:26:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11663a379f7e5e16ff24a73270582ffdee5571619035780210920772ff7bcc82","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:26:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/069d0ee78b942cf6c15f7f6a4f49adfbc9f09ae4ae273352d8b0ba4a2dabc093"} {"level":"info","ts":"2026-07-22T02:26:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2"} {"level":"info","ts":"2026-07-22T02:26:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11663a379f7e5e16ff24a73270582ffdee5571619035780210920772ff7bcc82"} {"level":"info","ts":"2026-07-22T02:26:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"} {"level":"info","ts":"2026-07-22T02:26:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/339a8498b859a4b4b57f24e5b31ecf0572ba0c555d27816768c0481fe2811ad4"} {"level":"info","ts":"2026-07-22T02:26:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f"} {"level":"info","ts":"2026-07-22T02:26:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09283234-531f-4365-a4bd-41b8d9cdb378","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52692","PortSpecifier":{"PortValue":52692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"09283234-531f-4365-a4bd-41b8d9cdb378","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:26:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09283234-531f-4365-a4bd-41b8d9cdb378","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52692","PortSpecifier":{"PortValue":52692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687162,"nanos":946429477},"http":{"id":"09283234-531f-4365-a4bd-41b8d9cdb378","method":"POST","headers":{":authority":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:26:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"09283234-531f-4365-a4bd-41b8d9cdb378","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:26:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"09283234-531f-4365-a4bd-41b8d9cdb378","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea87c7df-7d44-4a6d-a086-2850f9733702","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d0ea8cc2-7b86-4b0b-bbc0-db31674de9e3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe8ebd588071"]}} {"level":"debug","ts":"2026-07-22T02:26:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"09283234-531f-4365-a4bd-41b8d9cdb378","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe8ebd588071"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d0ea8cc2-7b86-4b0b-bbc0-db31674de9e3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea87c7df-7d44-4a6d-a086-2850f9733702","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:26:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09283234-531f-4365-a4bd-41b8d9cdb378","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:26:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09283234-531f-4365-a4bd-41b8d9cdb378","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:26:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09283234-531f-4365-a4bd-41b8d9cdb378","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-000830/auth-test-model-000830\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-000830/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:26:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"09283234-531f-4365-a4bd-41b8d9cdb378","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:26:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09283234-531f-4365-a4bd-41b8d9cdb378","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:26:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09283234-531f-4365-a4bd-41b8d9cdb378","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:26:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09283234-531f-4365-a4bd-41b8d9cdb378","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:26:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09283234-531f-4365-a4bd-41b8d9cdb378","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:26:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5409fba-2d99-4364-bfd6-a1c354bbf7e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50784","PortSpecifier":{"PortValue":50784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b5409fba-2d99-4364-bfd6-a1c354bbf7e6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7eead4.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:26:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b5409fba-2d99-4364-bfd6-a1c354bbf7e6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:50784","PortSpecifier":{"PortValue":50784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687162,"nanos":997205601},"http":{"id":"b5409fba-2d99-4364-bfd6-a1c354bbf7e6","method":"POST","headers":{":authority":"e2e-shared-b-7eead4.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:26:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b5409fba-2d99-4364-bfd6-a1c354bbf7e6","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:26:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b5409fba-2d99-4364-bfd6-a1c354bbf7e6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea87c7df-7d44-4a6d-a086-2850f9733702","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d0ea8cc2-7b86-4b0b-bbc0-db31674de9e3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe8ebd588071"]}} {"level":"debug","ts":"2026-07-22T02:26:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b5409fba-2d99-4364-bfd6-a1c354bbf7e6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe8ebd588071"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d0ea8cc2-7b86-4b0b-bbc0-db31674de9e3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea87c7df-7d44-4a6d-a086-2850f9733702","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7eead4.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:26:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5409fba-2d99-4364-bfd6-a1c354bbf7e6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:26:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5409fba-2d99-4364-bfd6-a1c354bbf7e6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:26:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b5409fba-2d99-4364-bfd6-a1c354bbf7e6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7eead4/auth-test-model-7eead4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7eead4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:26:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b5409fba-2d99-4364-bfd6-a1c354bbf7e6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:26:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5409fba-2d99-4364-bfd6-a1c354bbf7e6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:26:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b5409fba-2d99-4364-bfd6-a1c354bbf7e6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:26:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5409fba-2d99-4364-bfd6-a1c354bbf7e6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:26:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b5409fba-2d99-4364-bfd6-a1c354bbf7e6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:26:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"283f4329-4e5e-49c3-a5a7-3fffe02e8b05","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52698","PortSpecifier":{"PortValue":52698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"283f4329-4e5e-49c3-a5a7-3fffe02e8b05","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:26:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"283f4329-4e5e-49c3-a5a7-3fffe02e8b05","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:52698","PortSpecifier":{"PortValue":52698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687163,"nanos":39019591},"http":{"id":"283f4329-4e5e-49c3-a5a7-3fffe02e8b05","method":"POST","headers":{":authority":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:26:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"283f4329-4e5e-49c3-a5a7-3fffe02e8b05","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-x0LKCi8IAKmj1k26_McmHVrmhGeHOr0f2oTsbvcTMUO4bxjaMT3PZjjoEXcV"} {"level":"debug","ts":"2026-07-22T02:26:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"283f4329-4e5e-49c3-a5a7-3fffe02e8b05","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-x0LKCi8IAKmj1k26_McmHVrmhGeHOr0f2oTsbvcTMUO4bxjaMT3PZjjoEXcV\"}"} {"level":"debug","ts":"2026-07-22T02:26:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"283f4329-4e5e-49c3-a5a7-3fffe02e8b05","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9134e1ba-c789-4cfa-8cd6-e4b6498331c0","keyName":"e2e-auth-iso-a-7554f1","subscription":"e2e-auth-iso-80e1ac","tenant":"e2e-shared-a-000830","userId":"9134e1ba-c789-4cfa-8cd6-e4b6498331c0","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T02:26:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"283f4329-4e5e-49c3-a5a7-3fffe02e8b05","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:26:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"283f4329-4e5e-49c3-a5a7-3fffe02e8b05","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:26:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"283f4329-4e5e-49c3-a5a7-3fffe02e8b05","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:26:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"283f4329-4e5e-49c3-a5a7-3fffe02e8b05","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-000830/auth-test-model-000830\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-000830/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:26:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"283f4329-4e5e-49c3-a5a7-3fffe02e8b05","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:26:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"283f4329-4e5e-49c3-a5a7-3fffe02e8b05","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-22T02:26:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"283f4329-4e5e-49c3-a5a7-3fffe02e8b05","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-80e1ac"} {"level":"debug","ts":"2026-07-22T02:26:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"283f4329-4e5e-49c3-a5a7-3fffe02e8b05","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:26:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"283f4329-4e5e-49c3-a5a7-3fffe02e8b05","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:26:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"283f4329-4e5e-49c3-a5a7-3fffe02e8b05","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:26:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6093f95a97f1b418824b08dd0c26966fa2748a673bd6857d143b106d12036485"} {"level":"info","ts":"2026-07-22T02:26:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c1ccc332f2debe2cf6cbf9ddbfd8f54d97e4ec255a20effc05971c7fce477ed6"} {"level":"info","ts":"2026-07-22T02:26:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48"} {"level":"info","ts":"2026-07-22T02:26:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e13570dca035751d04b371393e03b0f193a23008e2d696bf586779fd45681423"} {"level":"info","ts":"2026-07-22T02:26:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e39ca52a70293d7b0e2737d7dd8d21df8cd23d39461f7b89d9677f1c09ed3dd9"} {"level":"info","ts":"2026-07-22T02:26:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bcbfe6d4afa727b2f817ed200cd07d2ee0de293a91e3ef1d57daec38936daa9f"} {"level":"info","ts":"2026-07-22T02:26:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e"} {"level":"info","ts":"2026-07-22T02:26:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6cb9c11874bc5319bed65da369caea2ac3f7b3bc25682ee51de86ae50f24fc3c"} {"level":"info","ts":"2026-07-22T02:26:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9961f93caef94c7c943afaa83b16422453eff2143b2c1c242dad72beed86953c"} {"level":"info","ts":"2026-07-22T02:26:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f"} {"level":"info","ts":"2026-07-22T02:26:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/339a8498b859a4b4b57f24e5b31ecf0572ba0c555d27816768c0481fe2811ad4"} {"level":"info","ts":"2026-07-22T02:26:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"} {"level":"info","ts":"2026-07-22T02:26:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0"} {"level":"info","ts":"2026-07-22T02:26:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe"} {"level":"info","ts":"2026-07-22T02:26:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56da7323976e16f508f2ec1a37930510d57cb05dabf5467d903ea97895631aa2"} {"level":"info","ts":"2026-07-22T02:26:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3"} {"level":"info","ts":"2026-07-22T02:26:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e92b6a159af8daf6811a4168c9dae1847af6db84cd8a862f0cf7eeba1e3adfee"} {"level":"info","ts":"2026-07-22T02:26:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/905da1aec274c72a27f3995b409c99d3df5c16b98265f66d4f035b2ec03efe23"} {"level":"info","ts":"2026-07-22T02:26:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/069d0ee78b942cf6c15f7f6a4f49adfbc9f09ae4ae273352d8b0ba4a2dabc093"} {"level":"info","ts":"2026-07-22T02:26:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5481d28448c620ebc6126ed4ad453403cdf551a9ca98012f0c48af3efabdeaa6"} {"level":"info","ts":"2026-07-22T02:26:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ee163f84c7886b098c7cef090e8b59cc1c5d70c7afa945050c29b9724b085ac9"} {"level":"info","ts":"2026-07-22T02:26:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28f4e98ae431dd49c07db4f57c833f0f56a87129c3e1597c4f1cb7b8e696b62d"} {"level":"info","ts":"2026-07-22T02:26:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e3b9186d45046cd6aba416cd0d629bc57078d3f296508951e52f6455eb58bc43"} {"level":"info","ts":"2026-07-22T02:26:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11663a379f7e5e16ff24a73270582ffdee5571619035780210920772ff7bcc82"} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:26:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:26:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:26:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:26:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:26:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:26:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:26:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:26:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:26:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:26:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c48382e8fb16ed6fd2121ecac7708b5c6eb421af9a51692e831c816437faeb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c48382e8fb16ed6fd2121ecac7708b5c6eb421af9a51692e831c816437faeb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c48382e8fb16ed6fd2121ecac7708b5c6eb421af9a51692e831c816437faeb7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c48382e8fb16ed6fd2121ecac7708b5c6eb421af9a51692e831c816437faeb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c48382e8fb16ed6fd2121ecac7708b5c6eb421af9a51692e831c816437faeb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c48382e8fb16ed6fd2121ecac7708b5c6eb421af9a51692e831c816437faeb7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c48382e8fb16ed6fd2121ecac7708b5c6eb421af9a51692e831c816437faeb7"} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c48382e8fb16ed6fd2121ecac7708b5c6eb421af9a51692e831c816437faeb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:26:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:26:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c48382e8fb16ed6fd2121ecac7708b5c6eb421af9a51692e831c816437faeb7"} {"level":"info","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61913c521a23f27c1454e0b038f9e0cc73fd222d277075ef4c6c55b005af987b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:58Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"} {"level":"info","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61913c521a23f27c1454e0b038f9e0cc73fd222d277075ef4c6c55b005af987b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:26:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:26:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61913c521a23f27c1454e0b038f9e0cc73fd222d277075ef4c6c55b005af987b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61913c521a23f27c1454e0b038f9e0cc73fd222d277075ef4c6c55b005af987b"} {"level":"info","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61913c521a23f27c1454e0b038f9e0cc73fd222d277075ef4c6c55b005af987b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c48382e8fb16ed6fd2121ecac7708b5c6eb421af9a51692e831c816437faeb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:26:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:26:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c48382e8fb16ed6fd2121ecac7708b5c6eb421af9a51692e831c816437faeb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61913c521a23f27c1454e0b038f9e0cc73fd222d277075ef4c6c55b005af987b"} {"level":"info","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c48382e8fb16ed6fd2121ecac7708b5c6eb421af9a51692e831c816437faeb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61913c521a23f27c1454e0b038f9e0cc73fd222d277075ef4c6c55b005af987b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:26:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:26:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61913c521a23f27c1454e0b038f9e0cc73fd222d277075ef4c6c55b005af987b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"} {"level":"info","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61913c521a23f27c1454e0b038f9e0cc73fd222d277075ef4c6c55b005af987b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c48382e8fb16ed6fd2121ecac7708b5c6eb421af9a51692e831c816437faeb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:26:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:26:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61913c521a23f27c1454e0b038f9e0cc73fd222d277075ef4c6c55b005af987b"} {"level":"info","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61913c521a23f27c1454e0b038f9e0cc73fd222d277075ef4c6c55b005af987b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:26:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c48382e8fb16ed6fd2121ecac7708b5c6eb421af9a51692e831c816437faeb7"} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61913c521a23f27c1454e0b038f9e0cc73fd222d277075ef4c6c55b005af987b"} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e"} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e"} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e"} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e"} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e"} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"736c3d20ae727041294eaf62fbc31e98f75540e18758781f7416ea3ce030ddd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"736c3d20ae727041294eaf62fbc31e98f75540e18758781f7416ea3ce030ddd6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/736c3d20ae727041294eaf62fbc31e98f75540e18758781f7416ea3ce030ddd6"} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"736c3d20ae727041294eaf62fbc31e98f75540e18758781f7416ea3ce030ddd6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"736c3d20ae727041294eaf62fbc31e98f75540e18758781f7416ea3ce030ddd6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/736c3d20ae727041294eaf62fbc31e98f75540e18758781f7416ea3ce030ddd6"} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"736c3d20ae727041294eaf62fbc31e98f75540e18758781f7416ea3ce030ddd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["736c3d20ae727041294eaf62fbc31e98f75540e18758781f7416ea3ce030ddd6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e"} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"736c3d20ae727041294eaf62fbc31e98f75540e18758781f7416ea3ce030ddd6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"736c3d20ae727041294eaf62fbc31e98f75540e18758781f7416ea3ce030ddd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"736c3d20ae727041294eaf62fbc31e98f75540e18758781f7416ea3ce030ddd6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"736c3d20ae727041294eaf62fbc31e98f75540e18758781f7416ea3ce030ddd6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"736c3d20ae727041294eaf62fbc31e98f75540e18758781f7416ea3ce030ddd6","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/736c3d20ae727041294eaf62fbc31e98f75540e18758781f7416ea3ce030ddd6"} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/736c3d20ae727041294eaf62fbc31e98f75540e18758781f7416ea3ce030ddd6"} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"736c3d20ae727041294eaf62fbc31e98f75540e18758781f7416ea3ce030ddd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["736c3d20ae727041294eaf62fbc31e98f75540e18758781f7416ea3ce030ddd6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"736c3d20ae727041294eaf62fbc31e98f75540e18758781f7416ea3ce030ddd6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa70e86eb72cc0b9ea6c3e3a80c6ceb64e6d9981b6adeb67df68be8563a01372","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe"} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa70e86eb72cc0b9ea6c3e3a80c6ceb64e6d9981b6adeb67df68be8563a01372","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa70e86eb72cc0b9ea6c3e3a80c6ceb64e6d9981b6adeb67df68be8563a01372"} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"736c3d20ae727041294eaf62fbc31e98f75540e18758781f7416ea3ce030ddd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"736c3d20ae727041294eaf62fbc31e98f75540e18758781f7416ea3ce030ddd6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa70e86eb72cc0b9ea6c3e3a80c6ceb64e6d9981b6adeb67df68be8563a01372","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa70e86eb72cc0b9ea6c3e3a80c6ceb64e6d9981b6adeb67df68be8563a01372"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/736c3d20ae727041294eaf62fbc31e98f75540e18758781f7416ea3ce030ddd6"} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa70e86eb72cc0b9ea6c3e3a80c6ceb64e6d9981b6adeb67df68be8563a01372","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe"} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"736c3d20ae727041294eaf62fbc31e98f75540e18758781f7416ea3ce030ddd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["736c3d20ae727041294eaf62fbc31e98f75540e18758781f7416ea3ce030ddd6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"736c3d20ae727041294eaf62fbc31e98f75540e18758781f7416ea3ce030ddd6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa70e86eb72cc0b9ea6c3e3a80c6ceb64e6d9981b6adeb67df68be8563a01372","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa70e86eb72cc0b9ea6c3e3a80c6ceb64e6d9981b6adeb67df68be8563a01372"} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa70e86eb72cc0b9ea6c3e3a80c6ceb64e6d9981b6adeb67df68be8563a01372","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1f9afd8819ade6d839142b919b5507221f17861187c2b01745b5db35db12071","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/736c3d20ae727041294eaf62fbc31e98f75540e18758781f7416ea3ce030ddd6"} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1f9afd8819ade6d839142b919b5507221f17861187c2b01745b5db35db12071","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"736c3d20ae727041294eaf62fbc31e98f75540e18758781f7416ea3ce030ddd6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa70e86eb72cc0b9ea6c3e3a80c6ceb64e6d9981b6adeb67df68be8563a01372","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa70e86eb72cc0b9ea6c3e3a80c6ceb64e6d9981b6adeb67df68be8563a01372"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa70e86eb72cc0b9ea6c3e3a80c6ceb64e6d9981b6adeb67df68be8563a01372","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1f9afd8819ade6d839142b919b5507221f17861187c2b01745b5db35db12071","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1f9afd8819ade6d839142b919b5507221f17861187c2b01745b5db35db12071"} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1f9afd8819ade6d839142b919b5507221f17861187c2b01745b5db35db12071","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa70e86eb72cc0b9ea6c3e3a80c6ceb64e6d9981b6adeb67df68be8563a01372","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1f9afd8819ade6d839142b919b5507221f17861187c2b01745b5db35db12071","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1f9afd8819ade6d839142b919b5507221f17861187c2b01745b5db35db12071"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1f9afd8819ade6d839142b919b5507221f17861187c2b01745b5db35db12071","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1f9afd8819ade6d839142b919b5507221f17861187c2b01745b5db35db12071","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe"} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa70e86eb72cc0b9ea6c3e3a80c6ceb64e6d9981b6adeb67df68be8563a01372"} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1f9afd8819ade6d839142b919b5507221f17861187c2b01745b5db35db12071"} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60045d3192b100175301e116d8dcb29676172951836646aea577f483cae296c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe"} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60045d3192b100175301e116d8dcb29676172951836646aea577f483cae296c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60045d3192b100175301e116d8dcb29676172951836646aea577f483cae296c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60045d3192b100175301e116d8dcb29676172951836646aea577f483cae296c3"} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60045d3192b100175301e116d8dcb29676172951836646aea577f483cae296c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60045d3192b100175301e116d8dcb29676172951836646aea577f483cae296c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60045d3192b100175301e116d8dcb29676172951836646aea577f483cae296c3"} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60045d3192b100175301e116d8dcb29676172951836646aea577f483cae296c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60045d3192b100175301e116d8dcb29676172951836646aea577f483cae296c3"} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60045d3192b100175301e116d8dcb29676172951836646aea577f483cae296c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60045d3192b100175301e116d8dcb29676172951836646aea577f483cae296c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60045d3192b100175301e116d8dcb29676172951836646aea577f483cae296c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60045d3192b100175301e116d8dcb29676172951836646aea577f483cae296c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60045d3192b100175301e116d8dcb29676172951836646aea577f483cae296c3"} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60045d3192b100175301e116d8dcb29676172951836646aea577f483cae296c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60045d3192b100175301e116d8dcb29676172951836646aea577f483cae296c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60045d3192b100175301e116d8dcb29676172951836646aea577f483cae296c3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60045d3192b100175301e116d8dcb29676172951836646aea577f483cae296c3"} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60045d3192b100175301e116d8dcb29676172951836646aea577f483cae296c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60045d3192b100175301e116d8dcb29676172951836646aea577f483cae296c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60045d3192b100175301e116d8dcb29676172951836646aea577f483cae296c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f72c5504e597c21c9ea930c8025ec542a935c25b024fa24ed1f033273dd515e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f72c5504e597c21c9ea930c8025ec542a935c25b024fa24ed1f033273dd515e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60045d3192b100175301e116d8dcb29676172951836646aea577f483cae296c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f72c5504e597c21c9ea930c8025ec542a935c25b024fa24ed1f033273dd515e"} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f72c5504e597c21c9ea930c8025ec542a935c25b024fa24ed1f033273dd515e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f72c5504e597c21c9ea930c8025ec542a935c25b024fa24ed1f033273dd515e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60045d3192b100175301e116d8dcb29676172951836646aea577f483cae296c3"} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f72c5504e597c21c9ea930c8025ec542a935c25b024fa24ed1f033273dd515e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f72c5504e597c21c9ea930c8025ec542a935c25b024fa24ed1f033273dd515e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3"} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f72c5504e597c21c9ea930c8025ec542a935c25b024fa24ed1f033273dd515e"} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:26:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3"} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3"} {"level":"debug","ts":"2026-07-22T02:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3"} {"level":"debug","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3"} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574"} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3"} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574"} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3"} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574"} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3"} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4078786d5abba56ea147f9f80a176769c06eff37c32a2fda462731b59d56d6f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4078786d5abba56ea147f9f80a176769c06eff37c32a2fda462731b59d56d6f6"} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574"} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4078786d5abba56ea147f9f80a176769c06eff37c32a2fda462731b59d56d6f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21baea973016d5fc1e204eea31106c4cb75546a56ba1920da7f35aec1955776b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21baea973016d5fc1e204eea31106c4cb75546a56ba1920da7f35aec1955776b"} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e43124eeaa6b77aa307ed41ff1078af0e8c1a398ce36a8e9624805f112d8300c"} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4078786d5abba56ea147f9f80a176769c06eff37c32a2fda462731b59d56d6f6"} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21baea973016d5fc1e204eea31106c4cb75546a56ba1920da7f35aec1955776b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f68da4d7379c9a0373c0e0d724e8683204a17efec36c9f3351626f529a9ac969"} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21baea973016d5fc1e204eea31106c4cb75546a56ba1920da7f35aec1955776b"} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e43124eeaa6b77aa307ed41ff1078af0e8c1a398ce36a8e9624805f112d8300c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e43124eeaa6b77aa307ed41ff1078af0e8c1a398ce36a8e9624805f112d8300c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48"} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574"} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e43124eeaa6b77aa307ed41ff1078af0e8c1a398ce36a8e9624805f112d8300c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4078786d5abba56ea147f9f80a176769c06eff37c32a2fda462731b59d56d6f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4078786d5abba56ea147f9f80a176769c06eff37c32a2fda462731b59d56d6f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc67f18f65e17f24dde8097235bb1de0955f9c9142c563e569dceb2be63a0c56"} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f"} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0"} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4078786d5abba56ea147f9f80a176769c06eff37c32a2fda462731b59d56d6f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f68da4d7379c9a0373c0e0d724e8683204a17efec36c9f3351626f529a9ac969","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f68da4d7379c9a0373c0e0d724e8683204a17efec36c9f3351626f529a9ac969"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e43124eeaa6b77aa307ed41ff1078af0e8c1a398ce36a8e9624805f112d8300c"} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f68da4d7379c9a0373c0e0d724e8683204a17efec36c9f3351626f529a9ac969","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21baea973016d5fc1e204eea31106c4cb75546a56ba1920da7f35aec1955776b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21baea973016d5fc1e204eea31106c4cb75546a56ba1920da7f35aec1955776b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36c2a6b8d8ae7e978d390cd0c1cc86430b0eb258289eb21581f5b31bba7c8ba6"} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21baea973016d5fc1e204eea31106c4cb75546a56ba1920da7f35aec1955776b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5481d28448c620ebc6126ed4ad453403cdf551a9ca98012f0c48af3efabdeaa6"} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b6e1a1b5d72f194581d0452fc09c1eed7bfe95e761da40868fe7bc3483b5416"} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc67f18f65e17f24dde8097235bb1de0955f9c9142c563e569dceb2be63a0c56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc67f18f65e17f24dde8097235bb1de0955f9c9142c563e569dceb2be63a0c56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4078786d5abba56ea147f9f80a176769c06eff37c32a2fda462731b59d56d6f6"} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51"} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc67f18f65e17f24dde8097235bb1de0955f9c9142c563e569dceb2be63a0c56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f68da4d7379c9a0373c0e0d724e8683204a17efec36c9f3351626f529a9ac969"} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21baea973016d5fc1e204eea31106c4cb75546a56ba1920da7f35aec1955776b"} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48"} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc67f18f65e17f24dde8097235bb1de0955f9c9142c563e569dceb2be63a0c56"} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f"} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e43124eeaa6b77aa307ed41ff1078af0e8c1a398ce36a8e9624805f112d8300c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36c2a6b8d8ae7e978d390cd0c1cc86430b0eb258289eb21581f5b31bba7c8ba6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36c2a6b8d8ae7e978d390cd0c1cc86430b0eb258289eb21581f5b31bba7c8ba6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0"} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36c2a6b8d8ae7e978d390cd0c1cc86430b0eb258289eb21581f5b31bba7c8ba6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5481d28448c620ebc6126ed4ad453403cdf551a9ca98012f0c48af3efabdeaa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5481d28448c620ebc6126ed4ad453403cdf551a9ca98012f0c48af3efabdeaa6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36c2a6b8d8ae7e978d390cd0c1cc86430b0eb258289eb21581f5b31bba7c8ba6"} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5481d28448c620ebc6126ed4ad453403cdf551a9ca98012f0c48af3efabdeaa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b6e1a1b5d72f194581d0452fc09c1eed7bfe95e761da40868fe7bc3483b5416","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b6e1a1b5d72f194581d0452fc09c1eed7bfe95e761da40868fe7bc3483b5416"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5481d28448c620ebc6126ed4ad453403cdf551a9ca98012f0c48af3efabdeaa6"} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b6e1a1b5d72f194581d0452fc09c1eed7bfe95e761da40868fe7bc3483b5416","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4078786d5abba56ea147f9f80a176769c06eff37c32a2fda462731b59d56d6f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b6e1a1b5d72f194581d0452fc09c1eed7bfe95e761da40868fe7bc3483b5416"} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f68da4d7379c9a0373c0e0d724e8683204a17efec36c9f3351626f529a9ac969","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21baea973016d5fc1e204eea31106c4cb75546a56ba1920da7f35aec1955776b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc67f18f65e17f24dde8097235bb1de0955f9c9142c563e569dceb2be63a0c56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36c2a6b8d8ae7e978d390cd0c1cc86430b0eb258289eb21581f5b31bba7c8ba6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5481d28448c620ebc6126ed4ad453403cdf551a9ca98012f0c48af3efabdeaa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b6e1a1b5d72f194581d0452fc09c1eed7bfe95e761da40868fe7bc3483b5416","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51"} {"level":"info","ts":"2026-07-22T02:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51"} {"level":"debug","ts":"2026-07-22T02:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51"} {"level":"info","ts":"2026-07-22T02:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51"} {"level":"debug","ts":"2026-07-22T02:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51"} {"level":"info","ts":"2026-07-22T02:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51"} {"level":"info","ts":"2026-07-22T02:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51"} {"level":"error","ts":"2026-07-22T02:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T02:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f15cd11-d70f-493c-ad88-03ff1afeb5e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59030","PortSpecifier":{"PortValue":59030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3f15cd11-d70f-493c-ad88-03ff1afeb5e9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f15cd11-d70f-493c-ad88-03ff1afeb5e9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59030","PortSpecifier":{"PortValue":59030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687224,"nanos":151831939},"http":{"id":"3f15cd11-d70f-493c-ad88-03ff1afeb5e9","method":"POST","headers":{":authority":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3f15cd11-d70f-493c-ad88-03ff1afeb5e9","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3f15cd11-d70f-493c-ad88-03ff1afeb5e9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea87c7df-7d44-4a6d-a086-2850f9733702","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d0ea8cc2-7b86-4b0b-bbc0-db31674de9e3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe8ebd588071"]}} {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3f15cd11-d70f-493c-ad88-03ff1afeb5e9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe8ebd588071"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d0ea8cc2-7b86-4b0b-bbc0-db31674de9e3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea87c7df-7d44-4a6d-a086-2850f9733702","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f15cd11-d70f-493c-ad88-03ff1afeb5e9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f15cd11-d70f-493c-ad88-03ff1afeb5e9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f15cd11-d70f-493c-ad88-03ff1afeb5e9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-000830/sub-test-model-000830\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-000830/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3f15cd11-d70f-493c-ad88-03ff1afeb5e9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f15cd11-d70f-493c-ad88-03ff1afeb5e9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f15cd11-d70f-493c-ad88-03ff1afeb5e9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f15cd11-d70f-493c-ad88-03ff1afeb5e9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f15cd11-d70f-493c-ad88-03ff1afeb5e9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc27faa1-d4b5-4634-8c23-53555e9336f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59690","PortSpecifier":{"PortValue":59690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fc27faa1-d4b5-4634-8c23-53555e9336f7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7eead4.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc27faa1-d4b5-4634-8c23-53555e9336f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59690","PortSpecifier":{"PortValue":59690}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687224,"nanos":195376994},"http":{"id":"fc27faa1-d4b5-4634-8c23-53555e9336f7","method":"POST","headers":{":authority":"e2e-shared-b-7eead4.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fc27faa1-d4b5-4634-8c23-53555e9336f7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fc27faa1-d4b5-4634-8c23-53555e9336f7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea87c7df-7d44-4a6d-a086-2850f9733702","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d0ea8cc2-7b86-4b0b-bbc0-db31674de9e3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe8ebd588071"]}} {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fc27faa1-d4b5-4634-8c23-53555e9336f7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe8ebd588071"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d0ea8cc2-7b86-4b0b-bbc0-db31674de9e3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea87c7df-7d44-4a6d-a086-2850f9733702","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7eead4.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc27faa1-d4b5-4634-8c23-53555e9336f7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc27faa1-d4b5-4634-8c23-53555e9336f7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc27faa1-d4b5-4634-8c23-53555e9336f7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7eead4/sub-test-model-7eead4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7eead4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fc27faa1-d4b5-4634-8c23-53555e9336f7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc27faa1-d4b5-4634-8c23-53555e9336f7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc27faa1-d4b5-4634-8c23-53555e9336f7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc27faa1-d4b5-4634-8c23-53555e9336f7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc27faa1-d4b5-4634-8c23-53555e9336f7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f57f946-3859-49c6-aae2-bb383a7c3e1a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59036","PortSpecifier":{"PortValue":59036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4f57f946-3859-49c6-aae2-bb383a7c3e1a","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4f57f946-3859-49c6-aae2-bb383a7c3e1a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59036","PortSpecifier":{"PortValue":59036}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687224,"nanos":234940890},"http":{"id":"4f57f946-3859-49c6-aae2-bb383a7c3e1a","method":"GET","headers":{":authority":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4f57f946-3859-49c6-aae2-bb383a7c3e1a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-SWM4351rpt8kfVwE_pyxgvuHDuiQ94RuCAihxeTGm9gWH9cIWBAQgUENT2Ez"} {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4f57f946-3859-49c6-aae2-bb383a7c3e1a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-SWM4351rpt8kfVwE_pyxgvuHDuiQ94RuCAihxeTGm9gWH9cIWBAQgUENT2Ez\"}"} {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4f57f946-3859-49c6-aae2-bb383a7c3e1a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fb701e06-0177-4201-914f-838416b05f27","keyName":"e2e-sub-iso-fd46f4","subscription":"e2e-a-only-ac7ff5","tenant":"e2e-shared-a-000830","userId":"fb701e06-0177-4201-914f-838416b05f27","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4f57f946-3859-49c6-aae2-bb383a7c3e1a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f57f946-3859-49c6-aae2-bb383a7c3e1a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f57f946-3859-49c6-aae2-bb383a7c3e1a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4f57f946-3859-49c6-aae2-bb383a7c3e1a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-000830/sub-test-model-000830\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-000830/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f57f946-3859-49c6-aae2-bb383a7c3e1a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-ac7ff5"} {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f57f946-3859-49c6-aae2-bb383a7c3e1a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4f57f946-3859-49c6-aae2-bb383a7c3e1a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4f57f946-3859-49c6-aae2-bb383a7c3e1a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f57f946-3859-49c6-aae2-bb383a7c3e1a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4f57f946-3859-49c6-aae2-bb383a7c3e1a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c501b79-13d3-4fff-88b1-f15fd697b7eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59702","PortSpecifier":{"PortValue":59702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9c501b79-13d3-4fff-88b1-f15fd697b7eb","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-7eead4.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9c501b79-13d3-4fff-88b1-f15fd697b7eb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:59702","PortSpecifier":{"PortValue":59702}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687224,"nanos":278669787},"http":{"id":"9c501b79-13d3-4fff-88b1-f15fd697b7eb","method":"GET","headers":{":authority":"e2e-shared-b-7eead4.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9c501b79-13d3-4fff-88b1-f15fd697b7eb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1b5MGR3NVCkCUGNRQ_BMDmtCqUW5tFzCHr1w83zh14FpSrdmZybDGXYQ4CC24"} {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9c501b79-13d3-4fff-88b1-f15fd697b7eb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-7eead4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1b5MGR3NVCkCUGNRQ_BMDmtCqUW5tFzCHr1w83zh14FpSrdmZybDGXYQ4CC24\"}"} {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9c501b79-13d3-4fff-88b1-f15fd697b7eb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-7eead4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"99a84432-b072-47e9-88ca-2645d03679ef","keyName":"e2e-sub-iso-a2329b","subscription":"e2e-b-only-ac7ff5","tenant":"e2e-shared-b-7eead4","userId":"99a84432-b072-47e9-88ca-2645d03679ef","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9c501b79-13d3-4fff-88b1-f15fd697b7eb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c501b79-13d3-4fff-88b1-f15fd697b7eb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c501b79-13d3-4fff-88b1-f15fd697b7eb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9c501b79-13d3-4fff-88b1-f15fd697b7eb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7eead4/sub-test-model-7eead4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7eead4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9c501b79-13d3-4fff-88b1-f15fd697b7eb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c501b79-13d3-4fff-88b1-f15fd697b7eb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c501b79-13d3-4fff-88b1-f15fd697b7eb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9c501b79-13d3-4fff-88b1-f15fd697b7eb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-ac7ff5"} {"level":"info","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c501b79-13d3-4fff-88b1-f15fd697b7eb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:27:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9c501b79-13d3-4fff-88b1-f15fd697b7eb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51"} {"level":"info","ts":"2026-07-22T02:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5481d28448c620ebc6126ed4ad453403cdf551a9ca98012f0c48af3efabdeaa6"} {"level":"info","ts":"2026-07-22T02:27:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/61913c521a23f27c1454e0b038f9e0cc73fd222d277075ef4c6c55b005af987b"} {"level":"info","ts":"2026-07-22T02:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4078786d5abba56ea147f9f80a176769c06eff37c32a2fda462731b59d56d6f6"} {"level":"info","ts":"2026-07-22T02:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e"} {"level":"info","ts":"2026-07-22T02:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e43124eeaa6b77aa307ed41ff1078af0e8c1a398ce36a8e9624805f112d8300c"} {"level":"info","ts":"2026-07-22T02:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3"} {"level":"info","ts":"2026-07-22T02:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48"} {"level":"info","ts":"2026-07-22T02:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa70e86eb72cc0b9ea6c3e3a80c6ceb64e6d9981b6adeb67df68be8563a01372"} {"level":"info","ts":"2026-07-22T02:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21baea973016d5fc1e204eea31106c4cb75546a56ba1920da7f35aec1955776b"} {"level":"info","ts":"2026-07-22T02:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0"} {"level":"info","ts":"2026-07-22T02:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc67f18f65e17f24dde8097235bb1de0955f9c9142c563e569dceb2be63a0c56"} {"level":"info","ts":"2026-07-22T02:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"} {"level":"info","ts":"2026-07-22T02:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f68da4d7379c9a0373c0e0d724e8683204a17efec36c9f3351626f529a9ac969"} {"level":"info","ts":"2026-07-22T02:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b6e1a1b5d72f194581d0452fc09c1eed7bfe95e761da40868fe7bc3483b5416"} {"level":"info","ts":"2026-07-22T02:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1f9afd8819ade6d839142b919b5507221f17861187c2b01745b5db35db12071"} {"level":"info","ts":"2026-07-22T02:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/736c3d20ae727041294eaf62fbc31e98f75540e18758781f7416ea3ce030ddd6"} {"level":"info","ts":"2026-07-22T02:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f"} {"level":"info","ts":"2026-07-22T02:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60045d3192b100175301e116d8dcb29676172951836646aea577f483cae296c3"} {"level":"info","ts":"2026-07-22T02:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574"} {"level":"info","ts":"2026-07-22T02:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f72c5504e597c21c9ea930c8025ec542a935c25b024fa24ed1f033273dd515e"} {"level":"info","ts":"2026-07-22T02:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36c2a6b8d8ae7e978d390cd0c1cc86430b0eb258289eb21581f5b31bba7c8ba6"} {"level":"info","ts":"2026-07-22T02:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe"} {"level":"info","ts":"2026-07-22T02:27:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c48382e8fb16ed6fd2121ecac7708b5c6eb421af9a51692e831c816437faeb7"} {"level":"debug","ts":"2026-07-22T02:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3"} {"level":"debug","ts":"2026-07-22T02:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3"} {"level":"debug","ts":"2026-07-22T02:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3"} {"level":"debug","ts":"2026-07-22T02:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3"} {"level":"debug","ts":"2026-07-22T02:27:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3"} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3"} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3"} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574"} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574"} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574"} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574"} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574"} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574"} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574"} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c48382e8fb16ed6fd2121ecac7708b5c6eb421af9a51692e831c816437faeb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574"} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c48382e8fb16ed6fd2121ecac7708b5c6eb421af9a51692e831c816437faeb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c48382e8fb16ed6fd2121ecac7708b5c6eb421af9a51692e831c816437faeb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c48382e8fb16ed6fd2121ecac7708b5c6eb421af9a51692e831c816437faeb7"} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c48382e8fb16ed6fd2121ecac7708b5c6eb421af9a51692e831c816437faeb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c48382e8fb16ed6fd2121ecac7708b5c6eb421af9a51692e831c816437faeb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c48382e8fb16ed6fd2121ecac7708b5c6eb421af9a51692e831c816437faeb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574"} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c48382e8fb16ed6fd2121ecac7708b5c6eb421af9a51692e831c816437faeb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c48382e8fb16ed6fd2121ecac7708b5c6eb421af9a51692e831c816437faeb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c48382e8fb16ed6fd2121ecac7708b5c6eb421af9a51692e831c816437faeb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e43124eeaa6b77aa307ed41ff1078af0e8c1a398ce36a8e9624805f112d8300c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c48382e8fb16ed6fd2121ecac7708b5c6eb421af9a51692e831c816437faeb7"} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e43124eeaa6b77aa307ed41ff1078af0e8c1a398ce36a8e9624805f112d8300c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c48382e8fb16ed6fd2121ecac7708b5c6eb421af9a51692e831c816437faeb7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c48382e8fb16ed6fd2121ecac7708b5c6eb421af9a51692e831c816437faeb7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c48382e8fb16ed6fd2121ecac7708b5c6eb421af9a51692e831c816437faeb7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e43124eeaa6b77aa307ed41ff1078af0e8c1a398ce36a8e9624805f112d8300c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c48382e8fb16ed6fd2121ecac7708b5c6eb421af9a51692e831c816437faeb7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574"} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e43124eeaa6b77aa307ed41ff1078af0e8c1a398ce36a8e9624805f112d8300c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e43124eeaa6b77aa307ed41ff1078af0e8c1a398ce36a8e9624805f112d8300c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e43124eeaa6b77aa307ed41ff1078af0e8c1a398ce36a8e9624805f112d8300c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e43124eeaa6b77aa307ed41ff1078af0e8c1a398ce36a8e9624805f112d8300c"} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e43124eeaa6b77aa307ed41ff1078af0e8c1a398ce36a8e9624805f112d8300c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e43124eeaa6b77aa307ed41ff1078af0e8c1a398ce36a8e9624805f112d8300c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c48382e8fb16ed6fd2121ecac7708b5c6eb421af9a51692e831c816437faeb7"} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e43124eeaa6b77aa307ed41ff1078af0e8c1a398ce36a8e9624805f112d8300c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e43124eeaa6b77aa307ed41ff1078af0e8c1a398ce36a8e9624805f112d8300c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e43124eeaa6b77aa307ed41ff1078af0e8c1a398ce36a8e9624805f112d8300c"} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e43124eeaa6b77aa307ed41ff1078af0e8c1a398ce36a8e9624805f112d8300c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e43124eeaa6b77aa307ed41ff1078af0e8c1a398ce36a8e9624805f112d8300c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e43124eeaa6b77aa307ed41ff1078af0e8c1a398ce36a8e9624805f112d8300c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0"} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e43124eeaa6b77aa307ed41ff1078af0e8c1a398ce36a8e9624805f112d8300c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e43124eeaa6b77aa307ed41ff1078af0e8c1a398ce36a8e9624805f112d8300c"} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e43124eeaa6b77aa307ed41ff1078af0e8c1a398ce36a8e9624805f112d8300c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0"} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e43124eeaa6b77aa307ed41ff1078af0e8c1a398ce36a8e9624805f112d8300c"} {"level":"error","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0"} {"level":"error","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0"} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f"} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc67f18f65e17f24dde8097235bb1de0955f9c9142c563e569dceb2be63a0c56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc67f18f65e17f24dde8097235bb1de0955f9c9142c563e569dceb2be63a0c56"} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc67f18f65e17f24dde8097235bb1de0955f9c9142c563e569dceb2be63a0c56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc67f18f65e17f24dde8097235bb1de0955f9c9142c563e569dceb2be63a0c56","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc67f18f65e17f24dde8097235bb1de0955f9c9142c563e569dceb2be63a0c56"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f"} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc67f18f65e17f24dde8097235bb1de0955f9c9142c563e569dceb2be63a0c56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc67f18f65e17f24dde8097235bb1de0955f9c9142c563e569dceb2be63a0c56","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0"} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc67f18f65e17f24dde8097235bb1de0955f9c9142c563e569dceb2be63a0c56"} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f72c5504e597c21c9ea930c8025ec542a935c25b024fa24ed1f033273dd515e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f"} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f72c5504e597c21c9ea930c8025ec542a935c25b024fa24ed1f033273dd515e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48"} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f72c5504e597c21c9ea930c8025ec542a935c25b024fa24ed1f033273dd515e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f72c5504e597c21c9ea930c8025ec542a935c25b024fa24ed1f033273dd515e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f72c5504e597c21c9ea930c8025ec542a935c25b024fa24ed1f033273dd515e"} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f72c5504e597c21c9ea930c8025ec542a935c25b024fa24ed1f033273dd515e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f72c5504e597c21c9ea930c8025ec542a935c25b024fa24ed1f033273dd515e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48"} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f72c5504e597c21c9ea930c8025ec542a935c25b024fa24ed1f033273dd515e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f72c5504e597c21c9ea930c8025ec542a935c25b024fa24ed1f033273dd515e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f72c5504e597c21c9ea930c8025ec542a935c25b024fa24ed1f033273dd515e"} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f72c5504e597c21c9ea930c8025ec542a935c25b024fa24ed1f033273dd515e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"736c3d20ae727041294eaf62fbc31e98f75540e18758781f7416ea3ce030ddd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"736c3d20ae727041294eaf62fbc31e98f75540e18758781f7416ea3ce030ddd6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f72c5504e597c21c9ea930c8025ec542a935c25b024fa24ed1f033273dd515e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f72c5504e597c21c9ea930c8025ec542a935c25b024fa24ed1f033273dd515e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48"} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f72c5504e597c21c9ea930c8025ec542a935c25b024fa24ed1f033273dd515e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36c2a6b8d8ae7e978d390cd0c1cc86430b0eb258289eb21581f5b31bba7c8ba6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36c2a6b8d8ae7e978d390cd0c1cc86430b0eb258289eb21581f5b31bba7c8ba6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"736c3d20ae727041294eaf62fbc31e98f75540e18758781f7416ea3ce030ddd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/736c3d20ae727041294eaf62fbc31e98f75540e18758781f7416ea3ce030ddd6"} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"736c3d20ae727041294eaf62fbc31e98f75540e18758781f7416ea3ce030ddd6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f72c5504e597c21c9ea930c8025ec542a935c25b024fa24ed1f033273dd515e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f72c5504e597c21c9ea930c8025ec542a935c25b024fa24ed1f033273dd515e"} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f72c5504e597c21c9ea930c8025ec542a935c25b024fa24ed1f033273dd515e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36c2a6b8d8ae7e978d390cd0c1cc86430b0eb258289eb21581f5b31bba7c8ba6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36c2a6b8d8ae7e978d390cd0c1cc86430b0eb258289eb21581f5b31bba7c8ba6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"736c3d20ae727041294eaf62fbc31e98f75540e18758781f7416ea3ce030ddd6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["736c3d20ae727041294eaf62fbc31e98f75540e18758781f7416ea3ce030ddd6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36c2a6b8d8ae7e978d390cd0c1cc86430b0eb258289eb21581f5b31bba7c8ba6"} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"736c3d20ae727041294eaf62fbc31e98f75540e18758781f7416ea3ce030ddd6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f72c5504e597c21c9ea930c8025ec542a935c25b024fa24ed1f033273dd515e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f72c5504e597c21c9ea930c8025ec542a935c25b024fa24ed1f033273dd515e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/736c3d20ae727041294eaf62fbc31e98f75540e18758781f7416ea3ce030ddd6"} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f72c5504e597c21c9ea930c8025ec542a935c25b024fa24ed1f033273dd515e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36c2a6b8d8ae7e978d390cd0c1cc86430b0eb258289eb21581f5b31bba7c8ba6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36c2a6b8d8ae7e978d390cd0c1cc86430b0eb258289eb21581f5b31bba7c8ba6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36c2a6b8d8ae7e978d390cd0c1cc86430b0eb258289eb21581f5b31bba7c8ba6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"736c3d20ae727041294eaf62fbc31e98f75540e18758781f7416ea3ce030ddd6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b6e1a1b5d72f194581d0452fc09c1eed7bfe95e761da40868fe7bc3483b5416","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f72c5504e597c21c9ea930c8025ec542a935c25b024fa24ed1f033273dd515e"} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36c2a6b8d8ae7e978d390cd0c1cc86430b0eb258289eb21581f5b31bba7c8ba6"} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b6e1a1b5d72f194581d0452fc09c1eed7bfe95e761da40868fe7bc3483b5416","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f72c5504e597c21c9ea930c8025ec542a935c25b024fa24ed1f033273dd515e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b6e1a1b5d72f194581d0452fc09c1eed7bfe95e761da40868fe7bc3483b5416"} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/736c3d20ae727041294eaf62fbc31e98f75540e18758781f7416ea3ce030ddd6"} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51"} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36c2a6b8d8ae7e978d390cd0c1cc86430b0eb258289eb21581f5b31bba7c8ba6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2b6e1a1b5d72f194581d0452fc09c1eed7bfe95e761da40868fe7bc3483b5416","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2b6e1a1b5d72f194581d0452fc09c1eed7bfe95e761da40868fe7bc3483b5416"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f72c5504e597c21c9ea930c8025ec542a935c25b024fa24ed1f033273dd515e"} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b6e1a1b5d72f194581d0452fc09c1eed7bfe95e761da40868fe7bc3483b5416"} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2b6e1a1b5d72f194581d0452fc09c1eed7bfe95e761da40868fe7bc3483b5416","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa70e86eb72cc0b9ea6c3e3a80c6ceb64e6d9981b6adeb67df68be8563a01372","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa70e86eb72cc0b9ea6c3e3a80c6ceb64e6d9981b6adeb67df68be8563a01372","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4078786d5abba56ea147f9f80a176769c06eff37c32a2fda462731b59d56d6f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa70e86eb72cc0b9ea6c3e3a80c6ceb64e6d9981b6adeb67df68be8563a01372"} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4078786d5abba56ea147f9f80a176769c06eff37c32a2fda462731b59d56d6f6"} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51"} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4078786d5abba56ea147f9f80a176769c06eff37c32a2fda462731b59d56d6f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2b6e1a1b5d72f194581d0452fc09c1eed7bfe95e761da40868fe7bc3483b5416"} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe"} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2b6e1a1b5d72f194581d0452fc09c1eed7bfe95e761da40868fe7bc3483b5416","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f68da4d7379c9a0373c0e0d724e8683204a17efec36c9f3351626f529a9ac969"} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa70e86eb72cc0b9ea6c3e3a80c6ceb64e6d9981b6adeb67df68be8563a01372"} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa70e86eb72cc0b9ea6c3e3a80c6ceb64e6d9981b6adeb67df68be8563a01372","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa70e86eb72cc0b9ea6c3e3a80c6ceb64e6d9981b6adeb67df68be8563a01372"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4078786d5abba56ea147f9f80a176769c06eff37c32a2fda462731b59d56d6f6"} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e"} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51"} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa70e86eb72cc0b9ea6c3e3a80c6ceb64e6d9981b6adeb67df68be8563a01372","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f68da4d7379c9a0373c0e0d724e8683204a17efec36c9f3351626f529a9ac969","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f68da4d7379c9a0373c0e0d724e8683204a17efec36c9f3351626f529a9ac969"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe"} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f68da4d7379c9a0373c0e0d724e8683204a17efec36c9f3351626f529a9ac969","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4078786d5abba56ea147f9f80a176769c06eff37c32a2fda462731b59d56d6f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4078786d5abba56ea147f9f80a176769c06eff37c32a2fda462731b59d56d6f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60045d3192b100175301e116d8dcb29676172951836646aea577f483cae296c3"} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa70e86eb72cc0b9ea6c3e3a80c6ceb64e6d9981b6adeb67df68be8563a01372"} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21baea973016d5fc1e204eea31106c4cb75546a56ba1920da7f35aec1955776b"} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4078786d5abba56ea147f9f80a176769c06eff37c32a2fda462731b59d56d6f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61913c521a23f27c1454e0b038f9e0cc73fd222d277075ef4c6c55b005af987b"} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f68da4d7379c9a0373c0e0d724e8683204a17efec36c9f3351626f529a9ac969"} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5481d28448c620ebc6126ed4ad453403cdf551a9ca98012f0c48af3efabdeaa6"} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4078786d5abba56ea147f9f80a176769c06eff37c32a2fda462731b59d56d6f6"} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1f9afd8819ade6d839142b919b5507221f17861187c2b01745b5db35db12071"} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"60045d3192b100175301e116d8dcb29676172951836646aea577f483cae296c3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["60045d3192b100175301e116d8dcb29676172951836646aea577f483cae296c3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e"} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"60045d3192b100175301e116d8dcb29676172951836646aea577f483cae296c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa70e86eb72cc0b9ea6c3e3a80c6ceb64e6d9981b6adeb67df68be8563a01372","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"21baea973016d5fc1e204eea31106c4cb75546a56ba1920da7f35aec1955776b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["21baea973016d5fc1e204eea31106c4cb75546a56ba1920da7f35aec1955776b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/60045d3192b100175301e116d8dcb29676172951836646aea577f483cae296c3"} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"21baea973016d5fc1e204eea31106c4cb75546a56ba1920da7f35aec1955776b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"61913c521a23f27c1454e0b038f9e0cc73fd222d277075ef4c6c55b005af987b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["61913c521a23f27c1454e0b038f9e0cc73fd222d277075ef4c6c55b005af987b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/21baea973016d5fc1e204eea31106c4cb75546a56ba1920da7f35aec1955776b"} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"61913c521a23f27c1454e0b038f9e0cc73fd222d277075ef4c6c55b005af987b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f68da4d7379c9a0373c0e0d724e8683204a17efec36c9f3351626f529a9ac969","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5481d28448c620ebc6126ed4ad453403cdf551a9ca98012f0c48af3efabdeaa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5481d28448c620ebc6126ed4ad453403cdf551a9ca98012f0c48af3efabdeaa6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/61913c521a23f27c1454e0b038f9e0cc73fd222d277075ef4c6c55b005af987b"} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5481d28448c620ebc6126ed4ad453403cdf551a9ca98012f0c48af3efabdeaa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4078786d5abba56ea147f9f80a176769c06eff37c32a2fda462731b59d56d6f6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1f9afd8819ade6d839142b919b5507221f17861187c2b01745b5db35db12071","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1f9afd8819ade6d839142b919b5507221f17861187c2b01745b5db35db12071"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5481d28448c620ebc6126ed4ad453403cdf551a9ca98012f0c48af3efabdeaa6"} {"level":"info","ts":"2026-07-22T02:27:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1f9afd8819ade6d839142b919b5507221f17861187c2b01745b5db35db12071","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"60045d3192b100175301e116d8dcb29676172951836646aea577f483cae296c3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"21baea973016d5fc1e204eea31106c4cb75546a56ba1920da7f35aec1955776b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"61913c521a23f27c1454e0b038f9e0cc73fd222d277075ef4c6c55b005af987b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5481d28448c620ebc6126ed4ad453403cdf551a9ca98012f0c48af3efabdeaa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1f9afd8819ade6d839142b919b5507221f17861187c2b01745b5db35db12071","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1f9afd8819ade6d839142b919b5507221f17861187c2b01745b5db35db12071"} {"level":"info","ts":"2026-07-22T02:27:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1f9afd8819ade6d839142b919b5507221f17861187c2b01745b5db35db12071","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1f9afd8819ade6d839142b919b5507221f17861187c2b01745b5db35db12071","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1f9afd8819ade6d839142b919b5507221f17861187c2b01745b5db35db12071","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:27:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1f9afd8819ade6d839142b919b5507221f17861187c2b01745b5db35db12071"} {"level":"debug","ts":"2026-07-22T02:27:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1f9afd8819ade6d839142b919b5507221f17861187c2b01745b5db35db12071","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1f9afd8819ade6d839142b919b5507221f17861187c2b01745b5db35db12071"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1f9afd8819ade6d839142b919b5507221f17861187c2b01745b5db35db12071","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1f9afd8819ade6d839142b919b5507221f17861187c2b01745b5db35db12071","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:27:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:27:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1f9afd8819ade6d839142b919b5507221f17861187c2b01745b5db35db12071"} {"level":"info","ts":"2026-07-22T02:27:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1f9afd8819ade6d839142b919b5507221f17861187c2b01745b5db35db12071","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1f9afd8819ade6d839142b919b5507221f17861187c2b01745b5db35db12071","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1f9afd8819ade6d839142b919b5507221f17861187c2b01745b5db35db12071","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:27:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1f9afd8819ade6d839142b919b5507221f17861187c2b01745b5db35db12071"} {"level":"debug","ts":"2026-07-22T02:27:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1f9afd8819ade6d839142b919b5507221f17861187c2b01745b5db35db12071","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:27:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:27:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1f9afd8819ade6d839142b919b5507221f17861187c2b01745b5db35db12071"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:27:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1f9afd8819ade6d839142b919b5507221f17861187c2b01745b5db35db12071","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:27:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1f9afd8819ade6d839142b919b5507221f17861187c2b01745b5db35db12071","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:27:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1f9afd8819ade6d839142b919b5507221f17861187c2b01745b5db35db12071"} {"level":"info","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0125ea20-de7e-4afc-94b9-4cb83ba436dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51646","PortSpecifier":{"PortValue":51646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0125ea20-de7e-4afc-94b9-4cb83ba436dd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0125ea20-de7e-4afc-94b9-4cb83ba436dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51646","PortSpecifier":{"PortValue":51646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687243,"nanos":75733820},"http":{"id":"0125ea20-de7e-4afc-94b9-4cb83ba436dd","method":"POST","headers":{":authority":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0125ea20-de7e-4afc-94b9-4cb83ba436dd","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0125ea20-de7e-4afc-94b9-4cb83ba436dd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea87c7df-7d44-4a6d-a086-2850f9733702","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d0ea8cc2-7b86-4b0b-bbc0-db31674de9e3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe8ebd588071"]}} {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0125ea20-de7e-4afc-94b9-4cb83ba436dd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe8ebd588071"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d0ea8cc2-7b86-4b0b-bbc0-db31674de9e3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea87c7df-7d44-4a6d-a086-2850f9733702","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0125ea20-de7e-4afc-94b9-4cb83ba436dd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0125ea20-de7e-4afc-94b9-4cb83ba436dd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0125ea20-de7e-4afc-94b9-4cb83ba436dd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-000830/sub-test-model-000830\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-000830/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0125ea20-de7e-4afc-94b9-4cb83ba436dd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0125ea20-de7e-4afc-94b9-4cb83ba436dd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0125ea20-de7e-4afc-94b9-4cb83ba436dd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0125ea20-de7e-4afc-94b9-4cb83ba436dd","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0125ea20-de7e-4afc-94b9-4cb83ba436dd","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d5e4886-bcac-44c7-b7e8-1a2bf3b83652","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:33540","PortSpecifier":{"PortValue":33540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7d5e4886-bcac-44c7-b7e8-1a2bf3b83652","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7eead4.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d5e4886-bcac-44c7-b7e8-1a2bf3b83652","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:33540","PortSpecifier":{"PortValue":33540}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687243,"nanos":138566903},"http":{"id":"7d5e4886-bcac-44c7-b7e8-1a2bf3b83652","method":"POST","headers":{":authority":"e2e-shared-b-7eead4.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7d5e4886-bcac-44c7-b7e8-1a2bf3b83652","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7d5e4886-bcac-44c7-b7e8-1a2bf3b83652","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea87c7df-7d44-4a6d-a086-2850f9733702","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d0ea8cc2-7b86-4b0b-bbc0-db31674de9e3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe8ebd588071"]}} {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7d5e4886-bcac-44c7-b7e8-1a2bf3b83652","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe8ebd588071"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d0ea8cc2-7b86-4b0b-bbc0-db31674de9e3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea87c7df-7d44-4a6d-a086-2850f9733702","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7eead4.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d5e4886-bcac-44c7-b7e8-1a2bf3b83652","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d5e4886-bcac-44c7-b7e8-1a2bf3b83652","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d5e4886-bcac-44c7-b7e8-1a2bf3b83652","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7eead4/sub-test-model-7eead4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7eead4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7d5e4886-bcac-44c7-b7e8-1a2bf3b83652","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d5e4886-bcac-44c7-b7e8-1a2bf3b83652","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d5e4886-bcac-44c7-b7e8-1a2bf3b83652","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d5e4886-bcac-44c7-b7e8-1a2bf3b83652","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d5e4886-bcac-44c7-b7e8-1a2bf3b83652","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2db3c73e-35cc-4439-8ce5-c1765901994e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51654","PortSpecifier":{"PortValue":51654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2db3c73e-35cc-4439-8ce5-c1765901994e","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2db3c73e-35cc-4439-8ce5-c1765901994e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:51654","PortSpecifier":{"PortValue":51654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687243,"nanos":175878614},"http":{"id":"2db3c73e-35cc-4439-8ce5-c1765901994e","method":"POST","headers":{":authority":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2db3c73e-35cc-4439-8ce5-c1765901994e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-38bZZGXdVkDmlvdm_R8MSSvDW3mxBouRNc68kWRZQ9Ma7kMKOxfcXOmKEa2H"} {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2db3c73e-35cc-4439-8ce5-c1765901994e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-38bZZGXdVkDmlvdm_R8MSSvDW3mxBouRNc68kWRZQ9Ma7kMKOxfcXOmKEa2H\"}"} {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2db3c73e-35cc-4439-8ce5-c1765901994e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"40a8e17b-fee0-4412-9f81-d6965e35b2f9","keyName":"e2e-sub-iso-c2e20f","subscription":"e2e-shared-sub-7a6442","tenant":"e2e-shared-a-000830","userId":"40a8e17b-fee0-4412-9f81-d6965e35b2f9","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2db3c73e-35cc-4439-8ce5-c1765901994e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2db3c73e-35cc-4439-8ce5-c1765901994e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2db3c73e-35cc-4439-8ce5-c1765901994e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2db3c73e-35cc-4439-8ce5-c1765901994e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-000830/sub-test-model-000830\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-000830/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2db3c73e-35cc-4439-8ce5-c1765901994e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2db3c73e-35cc-4439-8ce5-c1765901994e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-7a6442"} {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2db3c73e-35cc-4439-8ce5-c1765901994e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2db3c73e-35cc-4439-8ce5-c1765901994e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2db3c73e-35cc-4439-8ce5-c1765901994e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2db3c73e-35cc-4439-8ce5-c1765901994e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a719a59a-a560-404d-80b4-71910fa7e2c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:33548","PortSpecifier":{"PortValue":33548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a719a59a-a560-404d-80b4-71910fa7e2c9","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-7eead4.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a719a59a-a560-404d-80b4-71910fa7e2c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:33548","PortSpecifier":{"PortValue":33548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687243,"nanos":202309305},"http":{"id":"a719a59a-a560-404d-80b4-71910fa7e2c9","method":"POST","headers":{":authority":"e2e-shared-b-7eead4.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a719a59a-a560-404d-80b4-71910fa7e2c9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1OTuv1Hxai4d5QosU_V9WDUnfRm2dCPmNRjbu8ZhJQTyTshMpM2U50lZpKzI7"} {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a719a59a-a560-404d-80b4-71910fa7e2c9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-7eead4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1OTuv1Hxai4d5QosU_V9WDUnfRm2dCPmNRjbu8ZhJQTyTshMpM2U50lZpKzI7\"}"} {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a719a59a-a560-404d-80b4-71910fa7e2c9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-7eead4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5ed25e7f-0799-4161-b808-037b88087bef","keyName":"e2e-sub-iso-123a9c","subscription":"e2e-shared-sub-7a6442","tenant":"e2e-shared-b-7eead4","userId":"5ed25e7f-0799-4161-b808-037b88087bef","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a719a59a-a560-404d-80b4-71910fa7e2c9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a719a59a-a560-404d-80b4-71910fa7e2c9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a719a59a-a560-404d-80b4-71910fa7e2c9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a719a59a-a560-404d-80b4-71910fa7e2c9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7eead4/sub-test-model-7eead4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7eead4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a719a59a-a560-404d-80b4-71910fa7e2c9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a719a59a-a560-404d-80b4-71910fa7e2c9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-7a6442"} {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a719a59a-a560-404d-80b4-71910fa7e2c9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a719a59a-a560-404d-80b4-71910fa7e2c9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a719a59a-a560-404d-80b4-71910fa7e2c9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:27:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a719a59a-a560-404d-80b4-71910fa7e2c9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3"} {"level":"info","ts":"2026-07-22T02:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48"} {"level":"info","ts":"2026-07-22T02:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"} {"level":"info","ts":"2026-07-22T02:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f68da4d7379c9a0373c0e0d724e8683204a17efec36c9f3351626f529a9ac969"} {"level":"info","ts":"2026-07-22T02:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2b6e1a1b5d72f194581d0452fc09c1eed7bfe95e761da40868fe7bc3483b5416"} {"level":"info","ts":"2026-07-22T02:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f72c5504e597c21c9ea930c8025ec542a935c25b024fa24ed1f033273dd515e"} {"level":"info","ts":"2026-07-22T02:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa70e86eb72cc0b9ea6c3e3a80c6ceb64e6d9981b6adeb67df68be8563a01372"} {"level":"info","ts":"2026-07-22T02:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1f9afd8819ade6d839142b919b5507221f17861187c2b01745b5db35db12071"} {"level":"info","ts":"2026-07-22T02:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e43124eeaa6b77aa307ed41ff1078af0e8c1a398ce36a8e9624805f112d8300c"} {"level":"info","ts":"2026-07-22T02:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/61913c521a23f27c1454e0b038f9e0cc73fd222d277075ef4c6c55b005af987b"} {"level":"info","ts":"2026-07-22T02:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c48382e8fb16ed6fd2121ecac7708b5c6eb421af9a51692e831c816437faeb7"} {"level":"info","ts":"2026-07-22T02:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/736c3d20ae727041294eaf62fbc31e98f75540e18758781f7416ea3ce030ddd6"} {"level":"info","ts":"2026-07-22T02:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc67f18f65e17f24dde8097235bb1de0955f9c9142c563e569dceb2be63a0c56"} {"level":"info","ts":"2026-07-22T02:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0"} {"level":"info","ts":"2026-07-22T02:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f"} {"level":"info","ts":"2026-07-22T02:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e"} {"level":"info","ts":"2026-07-22T02:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5481d28448c620ebc6126ed4ad453403cdf551a9ca98012f0c48af3efabdeaa6"} {"level":"info","ts":"2026-07-22T02:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60045d3192b100175301e116d8dcb29676172951836646aea577f483cae296c3"} {"level":"info","ts":"2026-07-22T02:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22bdd503d11eccc01cf10267521175df41b33ad0672b757285a8e1f369ad9574"} {"level":"info","ts":"2026-07-22T02:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36c2a6b8d8ae7e978d390cd0c1cc86430b0eb258289eb21581f5b31bba7c8ba6"} {"level":"info","ts":"2026-07-22T02:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/21baea973016d5fc1e204eea31106c4cb75546a56ba1920da7f35aec1955776b"} {"level":"info","ts":"2026-07-22T02:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe"} {"level":"info","ts":"2026-07-22T02:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e3054b4e9ffdb79ca5f593d6758e99db3c0f6249d6307dae0e480ba5704e1b51"} {"level":"info","ts":"2026-07-22T02:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4078786d5abba56ea147f9f80a176769c06eff37c32a2fda462731b59d56d6f6"} {"level":"debug","ts":"2026-07-22T02:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e05aa5b212f5a5228cfb7fc933b146391673a6a8a35766c7a79ed7a54262847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:28:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:28:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e05aa5b212f5a5228cfb7fc933b146391673a6a8a35766c7a79ed7a54262847","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:28:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:28:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e05aa5b212f5a5228cfb7fc933b146391673a6a8a35766c7a79ed7a54262847"} {"level":"info","ts":"2026-07-22T02:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e05aa5b212f5a5228cfb7fc933b146391673a6a8a35766c7a79ed7a54262847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:28:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:28:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e05aa5b212f5a5228cfb7fc933b146391673a6a8a35766c7a79ed7a54262847"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"} {"level":"info","ts":"2026-07-22T02:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e05aa5b212f5a5228cfb7fc933b146391673a6a8a35766c7a79ed7a54262847","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:28:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:28:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e05aa5b212f5a5228cfb7fc933b146391673a6a8a35766c7a79ed7a54262847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:28:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:28:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e05aa5b212f5a5228cfb7fc933b146391673a6a8a35766c7a79ed7a54262847"} {"level":"info","ts":"2026-07-22T02:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e05aa5b212f5a5228cfb7fc933b146391673a6a8a35766c7a79ed7a54262847","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:28:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:28:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e05aa5b212f5a5228cfb7fc933b146391673a6a8a35766c7a79ed7a54262847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:28:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:28:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e05aa5b212f5a5228cfb7fc933b146391673a6a8a35766c7a79ed7a54262847"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"} {"level":"info","ts":"2026-07-22T02:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e05aa5b212f5a5228cfb7fc933b146391673a6a8a35766c7a79ed7a54262847","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:28:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:28:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e05aa5b212f5a5228cfb7fc933b146391673a6a8a35766c7a79ed7a54262847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:28:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:28:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e05aa5b212f5a5228cfb7fc933b146391673a6a8a35766c7a79ed7a54262847","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:28:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:28:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e05aa5b212f5a5228cfb7fc933b146391673a6a8a35766c7a79ed7a54262847"} {"level":"info","ts":"2026-07-22T02:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:28:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:28:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e05aa5b212f5a5228cfb7fc933b146391673a6a8a35766c7a79ed7a54262847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e05aa5b212f5a5228cfb7fc933b146391673a6a8a35766c7a79ed7a54262847"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e05aa5b212f5a5228cfb7fc933b146391673a6a8a35766c7a79ed7a54262847","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:28:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:28:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e"} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e05aa5b212f5a5228cfb7fc933b146391673a6a8a35766c7a79ed7a54262847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e05aa5b212f5a5228cfb7fc933b146391673a6a8a35766c7a79ed7a54262847"} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e05aa5b212f5a5228cfb7fc933b146391673a6a8a35766c7a79ed7a54262847","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e05aa5b212f5a5228cfb7fc933b146391673a6a8a35766c7a79ed7a54262847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e05aa5b212f5a5228cfb7fc933b146391673a6a8a35766c7a79ed7a54262847"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e"} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e05aa5b212f5a5228cfb7fc933b146391673a6a8a35766c7a79ed7a54262847","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3"} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e05aa5b212f5a5228cfb7fc933b146391673a6a8a35766c7a79ed7a54262847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e05aa5b212f5a5228cfb7fc933b146391673a6a8a35766c7a79ed7a54262847"} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e05aa5b212f5a5228cfb7fc933b146391673a6a8a35766c7a79ed7a54262847","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5481d28448c620ebc6126ed4ad453403cdf551a9ca98012f0c48af3efabdeaa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f"} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5481d28448c620ebc6126ed4ad453403cdf551a9ca98012f0c48af3efabdeaa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e05aa5b212f5a5228cfb7fc933b146391673a6a8a35766c7a79ed7a54262847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e05aa5b212f5a5228cfb7fc933b146391673a6a8a35766c7a79ed7a54262847"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e"} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e05aa5b212f5a5228cfb7fc933b146391673a6a8a35766c7a79ed7a54262847","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fdbf5479088293464dd4dabcef1ab9234e359edec1f2e22b5addffea335a85f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3"} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fdbf5479088293464dd4dabcef1ab9234e359edec1f2e22b5addffea335a85f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5481d28448c620ebc6126ed4ad453403cdf551a9ca98012f0c48af3efabdeaa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5481d28448c620ebc6126ed4ad453403cdf551a9ca98012f0c48af3efabdeaa6"} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5481d28448c620ebc6126ed4ad453403cdf551a9ca98012f0c48af3efabdeaa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e05aa5b212f5a5228cfb7fc933b146391673a6a8a35766c7a79ed7a54262847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e05aa5b212f5a5228cfb7fc933b146391673a6a8a35766c7a79ed7a54262847","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fdbf5479088293464dd4dabcef1ab9234e359edec1f2e22b5addffea335a85f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5481d28448c620ebc6126ed4ad453403cdf551a9ca98012f0c48af3efabdeaa6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5481d28448c620ebc6126ed4ad453403cdf551a9ca98012f0c48af3efabdeaa6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e05aa5b212f5a5228cfb7fc933b146391673a6a8a35766c7a79ed7a54262847"} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5481d28448c620ebc6126ed4ad453403cdf551a9ca98012f0c48af3efabdeaa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e05aa5b212f5a5228cfb7fc933b146391673a6a8a35766c7a79ed7a54262847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e05aa5b212f5a5228cfb7fc933b146391673a6a8a35766c7a79ed7a54262847"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f"} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e05aa5b212f5a5228cfb7fc933b146391673a6a8a35766c7a79ed7a54262847","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fdbf5479088293464dd4dabcef1ab9234e359edec1f2e22b5addffea335a85f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fdbf5479088293464dd4dabcef1ab9234e359edec1f2e22b5addffea335a85f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5481d28448c620ebc6126ed4ad453403cdf551a9ca98012f0c48af3efabdeaa6","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e05aa5b212f5a5228cfb7fc933b146391673a6a8a35766c7a79ed7a54262847","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fdbf5479088293464dd4dabcef1ab9234e359edec1f2e22b5addffea335a85f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fdbf5479088293464dd4dabcef1ab9234e359edec1f2e22b5addffea335a85f"} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5fdbf5479088293464dd4dabcef1ab9234e359edec1f2e22b5addffea335a85f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5fdbf5479088293464dd4dabcef1ab9234e359edec1f2e22b5addffea335a85f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5481d28448c620ebc6126ed4ad453403cdf551a9ca98012f0c48af3efabdeaa6"} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5fdbf5479088293464dd4dabcef1ab9234e359edec1f2e22b5addffea335a85f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5fdbf5479088293464dd4dabcef1ab9234e359edec1f2e22b5addffea335a85f","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e05aa5b212f5a5228cfb7fc933b146391673a6a8a35766c7a79ed7a54262847"} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5fdbf5479088293464dd4dabcef1ab9234e359edec1f2e22b5addffea335a85f"} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1052ea21b2bde5c25b38961de7418c5ec82a5472cef64ce758524569d5140f77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1052ea21b2bde5c25b38961de7418c5ec82a5472cef64ce758524569d5140f77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1052ea21b2bde5c25b38961de7418c5ec82a5472cef64ce758524569d5140f77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1052ea21b2bde5c25b38961de7418c5ec82a5472cef64ce758524569d5140f77"} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1052ea21b2bde5c25b38961de7418c5ec82a5472cef64ce758524569d5140f77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1052ea21b2bde5c25b38961de7418c5ec82a5472cef64ce758524569d5140f77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1052ea21b2bde5c25b38961de7418c5ec82a5472cef64ce758524569d5140f77","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1052ea21b2bde5c25b38961de7418c5ec82a5472cef64ce758524569d5140f77\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1052ea21b2bde5c25b38961de7418c5ec82a5472cef64ce758524569d5140f77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1052ea21b2bde5c25b38961de7418c5ec82a5472cef64ce758524569d5140f77","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1052ea21b2bde5c25b38961de7418c5ec82a5472cef64ce758524569d5140f77"} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1052ea21b2bde5c25b38961de7418c5ec82a5472cef64ce758524569d5140f77"} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0106e4f1216de4e8b2e96af0848f40cfa078e4a51b2808215072722924399f8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0106e4f1216de4e8b2e96af0848f40cfa078e4a51b2808215072722924399f8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1052ea21b2bde5c25b38961de7418c5ec82a5472cef64ce758524569d5140f77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1052ea21b2bde5c25b38961de7418c5ec82a5472cef64ce758524569d5140f77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0106e4f1216de4e8b2e96af0848f40cfa078e4a51b2808215072722924399f8a"} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1052ea21b2bde5c25b38961de7418c5ec82a5472cef64ce758524569d5140f77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0106e4f1216de4e8b2e96af0848f40cfa078e4a51b2808215072722924399f8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1052ea21b2bde5c25b38961de7418c5ec82a5472cef64ce758524569d5140f77","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0106e4f1216de4e8b2e96af0848f40cfa078e4a51b2808215072722924399f8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0106e4f1216de4e8b2e96af0848f40cfa078e4a51b2808215072722924399f8a"} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0106e4f1216de4e8b2e96af0848f40cfa078e4a51b2808215072722924399f8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0106e4f1216de4e8b2e96af0848f40cfa078e4a51b2808215072722924399f8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1052ea21b2bde5c25b38961de7418c5ec82a5472cef64ce758524569d5140f77"} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0106e4f1216de4e8b2e96af0848f40cfa078e4a51b2808215072722924399f8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0106e4f1216de4e8b2e96af0848f40cfa078e4a51b2808215072722924399f8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0106e4f1216de4e8b2e96af0848f40cfa078e4a51b2808215072722924399f8a"} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0106e4f1216de4e8b2e96af0848f40cfa078e4a51b2808215072722924399f8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0106e4f1216de4e8b2e96af0848f40cfa078e4a51b2808215072722924399f8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0106e4f1216de4e8b2e96af0848f40cfa078e4a51b2808215072722924399f8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0106e4f1216de4e8b2e96af0848f40cfa078e4a51b2808215072722924399f8a"} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0106e4f1216de4e8b2e96af0848f40cfa078e4a51b2808215072722924399f8a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0106e4f1216de4e8b2e96af0848f40cfa078e4a51b2808215072722924399f8a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0106e4f1216de4e8b2e96af0848f40cfa078e4a51b2808215072722924399f8a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0106e4f1216de4e8b2e96af0848f40cfa078e4a51b2808215072722924399f8a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0106e4f1216de4e8b2e96af0848f40cfa078e4a51b2808215072722924399f8a"} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b0101f48d3950398a9ba432fbcdb8431bb1c98f78ee0c22f78c64e646bdd664","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b0101f48d3950398a9ba432fbcdb8431bb1c98f78ee0c22f78c64e646bdd664"} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b0101f48d3950398a9ba432fbcdb8431bb1c98f78ee0c22f78c64e646bdd664","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c34bed99faca4ccf093c04d0bd2d92f45d470b0daf4cae1f07e7136557c40a09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c34bed99faca4ccf093c04d0bd2d92f45d470b0daf4cae1f07e7136557c40a09"} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c34bed99faca4ccf093c04d0bd2d92f45d470b0daf4cae1f07e7136557c40a09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b0101f48d3950398a9ba432fbcdb8431bb1c98f78ee0c22f78c64e646bdd664","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c34bed99faca4ccf093c04d0bd2d92f45d470b0daf4cae1f07e7136557c40a09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c34bed99faca4ccf093c04d0bd2d92f45d470b0daf4cae1f07e7136557c40a09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b0101f48d3950398a9ba432fbcdb8431bb1c98f78ee0c22f78c64e646bdd664"} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c34bed99faca4ccf093c04d0bd2d92f45d470b0daf4cae1f07e7136557c40a09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b0101f48d3950398a9ba432fbcdb8431bb1c98f78ee0c22f78c64e646bdd664","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b0101f48d3950398a9ba432fbcdb8431bb1c98f78ee0c22f78c64e646bdd664"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c34bed99faca4ccf093c04d0bd2d92f45d470b0daf4cae1f07e7136557c40a09"} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b0101f48d3950398a9ba432fbcdb8431bb1c98f78ee0c22f78c64e646bdd664","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c34bed99faca4ccf093c04d0bd2d92f45d470b0daf4cae1f07e7136557c40a09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c34bed99faca4ccf093c04d0bd2d92f45d470b0daf4cae1f07e7136557c40a09"} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c34bed99faca4ccf093c04d0bd2d92f45d470b0daf4cae1f07e7136557c40a09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b0101f48d3950398a9ba432fbcdb8431bb1c98f78ee0c22f78c64e646bdd664","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b0101f48d3950398a9ba432fbcdb8431bb1c98f78ee0c22f78c64e646bdd664"} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b0101f48d3950398a9ba432fbcdb8431bb1c98f78ee0c22f78c64e646bdd664","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c34bed99faca4ccf093c04d0bd2d92f45d470b0daf4cae1f07e7136557c40a09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b0101f48d3950398a9ba432fbcdb8431bb1c98f78ee0c22f78c64e646bdd664","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b0101f48d3950398a9ba432fbcdb8431bb1c98f78ee0c22f78c64e646bdd664"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b0101f48d3950398a9ba432fbcdb8431bb1c98f78ee0c22f78c64e646bdd664","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c34bed99faca4ccf093c04d0bd2d92f45d470b0daf4cae1f07e7136557c40a09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b0101f48d3950398a9ba432fbcdb8431bb1c98f78ee0c22f78c64e646bdd664","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b0101f48d3950398a9ba432fbcdb8431bb1c98f78ee0c22f78c64e646bdd664"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6b0101f48d3950398a9ba432fbcdb8431bb1c98f78ee0c22f78c64e646bdd664","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6b0101f48d3950398a9ba432fbcdb8431bb1c98f78ee0c22f78c64e646bdd664\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b0101f48d3950398a9ba432fbcdb8431bb1c98f78ee0c22f78c64e646bdd664","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b0101f48d3950398a9ba432fbcdb8431bb1c98f78ee0c22f78c64e646bdd664","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c34bed99faca4ccf093c04d0bd2d92f45d470b0daf4cae1f07e7136557c40a09"} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c34bed99faca4ccf093c04d0bd2d92f45d470b0daf4cae1f07e7136557c40a09","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c34bed99faca4ccf093c04d0bd2d92f45d470b0daf4cae1f07e7136557c40a09"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c34bed99faca4ccf093c04d0bd2d92f45d470b0daf4cae1f07e7136557c40a09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47c67cae0f9cf1600d05bf217ab25a874bbafb2d98b28dfc1d5590c9e9683772","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47c67cae0f9cf1600d05bf217ab25a874bbafb2d98b28dfc1d5590c9e9683772","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c34bed99faca4ccf093c04d0bd2d92f45d470b0daf4cae1f07e7136557c40a09","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1be94ebf031df9476f3ed66e20d33d184b3ebd42a5b54d97f0677924ed736f47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b0101f48d3950398a9ba432fbcdb8431bb1c98f78ee0c22f78c64e646bdd664"} {"level":"info","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1be94ebf031df9476f3ed66e20d33d184b3ebd42a5b54d97f0677924ed736f47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47c67cae0f9cf1600d05bf217ab25a874bbafb2d98b28dfc1d5590c9e9683772","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47c67cae0f9cf1600d05bf217ab25a874bbafb2d98b28dfc1d5590c9e9683772","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1be94ebf031df9476f3ed66e20d33d184b3ebd42a5b54d97f0677924ed736f47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47c67cae0f9cf1600d05bf217ab25a874bbafb2d98b28dfc1d5590c9e9683772","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47c67cae0f9cf1600d05bf217ab25a874bbafb2d98b28dfc1d5590c9e9683772"} {"level":"debug","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47c67cae0f9cf1600d05bf217ab25a874bbafb2d98b28dfc1d5590c9e9683772","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:28:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:28:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47c67cae0f9cf1600d05bf217ab25a874bbafb2d98b28dfc1d5590c9e9683772"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47c67cae0f9cf1600d05bf217ab25a874bbafb2d98b28dfc1d5590c9e9683772","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1be94ebf031df9476f3ed66e20d33d184b3ebd42a5b54d97f0677924ed736f47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47c67cae0f9cf1600d05bf217ab25a874bbafb2d98b28dfc1d5590c9e9683772","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c34bed99faca4ccf093c04d0bd2d92f45d470b0daf4cae1f07e7136557c40a09"} {"level":"debug","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1be94ebf031df9476f3ed66e20d33d184b3ebd42a5b54d97f0677924ed736f47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:28:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1be94ebf031df9476f3ed66e20d33d184b3ebd42a5b54d97f0677924ed736f47"} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1be94ebf031df9476f3ed66e20d33d184b3ebd42a5b54d97f0677924ed736f47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a86c535d87f73a7405d50223379da0c4ac8ce54795f786efc0194f29be070ccb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:28:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:28:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47c67cae0f9cf1600d05bf217ab25a874bbafb2d98b28dfc1d5590c9e9683772"} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a86c535d87f73a7405d50223379da0c4ac8ce54795f786efc0194f29be070ccb"} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b73d78c2fd1225195efc8a2d5c84696f44b8b29a6d2696ef9f4b80485443f2bb"} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a86c535d87f73a7405d50223379da0c4ac8ce54795f786efc0194f29be070ccb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b73d78c2fd1225195efc8a2d5c84696f44b8b29a6d2696ef9f4b80485443f2bb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:28:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:28:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b73d78c2fd1225195efc8a2d5c84696f44b8b29a6d2696ef9f4b80485443f2bb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1be94ebf031df9476f3ed66e20d33d184b3ebd42a5b54d97f0677924ed736f47"} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24990eeeefe2b26fd1e764edf3e286550b5ad5aaf0d8dd9fdbca10c0d719920d"} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b73d78c2fd1225195efc8a2d5c84696f44b8b29a6d2696ef9f4b80485443f2bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1be94ebf031df9476f3ed66e20d33d184b3ebd42a5b54d97f0677924ed736f47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:28:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:28:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1be94ebf031df9476f3ed66e20d33d184b3ebd42a5b54d97f0677924ed736f47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a86c535d87f73a7405d50223379da0c4ac8ce54795f786efc0194f29be070ccb"} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f63f911ad20ec8d58908d7286e0c468baa847b130acbd6b55c4950dfd4f2214e"} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca49896b8dd759a3e630eb1010ea616f15e75588a9d2b05671523a8e434df7d1"} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1be94ebf031df9476f3ed66e20d33d184b3ebd42a5b54d97f0677924ed736f47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24990eeeefe2b26fd1e764edf3e286550b5ad5aaf0d8dd9fdbca10c0d719920d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:28:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:28:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24990eeeefe2b26fd1e764edf3e286550b5ad5aaf0d8dd9fdbca10c0d719920d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b73d78c2fd1225195efc8a2d5c84696f44b8b29a6d2696ef9f4b80485443f2bb"} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe"} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24990eeeefe2b26fd1e764edf3e286550b5ad5aaf0d8dd9fdbca10c0d719920d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a86c535d87f73a7405d50223379da0c4ac8ce54795f786efc0194f29be070ccb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:28:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:28:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a86c535d87f73a7405d50223379da0c4ac8ce54795f786efc0194f29be070ccb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0"} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1be94ebf031df9476f3ed66e20d33d184b3ebd42a5b54d97f0677924ed736f47"} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48"} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a86c535d87f73a7405d50223379da0c4ac8ce54795f786efc0194f29be070ccb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f63f911ad20ec8d58908d7286e0c468baa847b130acbd6b55c4950dfd4f2214e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:28:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:28:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f63f911ad20ec8d58908d7286e0c468baa847b130acbd6b55c4950dfd4f2214e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24990eeeefe2b26fd1e764edf3e286550b5ad5aaf0d8dd9fdbca10c0d719920d"} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf65927c2e995159661cb4d48d34217d059b3a0970b47ab32b70396223719355"} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f63f911ad20ec8d58908d7286e0c468baa847b130acbd6b55c4950dfd4f2214e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca49896b8dd759a3e630eb1010ea616f15e75588a9d2b05671523a8e434df7d1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:28:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:28:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca49896b8dd759a3e630eb1010ea616f15e75588a9d2b05671523a8e434df7d1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a87347e676159f925f532d091c7af7a4f62ac5d1e01cd2f5a192984a4ac74858"} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8155cead5addae80c60ae80fda2fe6e7762360a66b946b9f96b8a6aeb142a752"} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca49896b8dd759a3e630eb1010ea616f15e75588a9d2b05671523a8e434df7d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b73d78c2fd1225195efc8a2d5c84696f44b8b29a6d2696ef9f4b80485443f2bb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:28:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:28:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a86c535d87f73a7405d50223379da0c4ac8ce54795f786efc0194f29be070ccb"} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f63f911ad20ec8d58908d7286e0c468baa847b130acbd6b55c4950dfd4f2214e"} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca49896b8dd759a3e630eb1010ea616f15e75588a9d2b05671523a8e434df7d1"} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:28:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:28:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe"} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1be94ebf031df9476f3ed66e20d33d184b3ebd42a5b54d97f0677924ed736f47","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:28:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:28:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0"} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24990eeeefe2b26fd1e764edf3e286550b5ad5aaf0d8dd9fdbca10c0d719920d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bf65927c2e995159661cb4d48d34217d059b3a0970b47ab32b70396223719355","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:28:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:28:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bf65927c2e995159661cb4d48d34217d059b3a0970b47ab32b70396223719355"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48"} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bf65927c2e995159661cb4d48d34217d059b3a0970b47ab32b70396223719355","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a87347e676159f925f532d091c7af7a4f62ac5d1e01cd2f5a192984a4ac74858","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:28:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:28:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a87347e676159f925f532d091c7af7a4f62ac5d1e01cd2f5a192984a4ac74858"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bf65927c2e995159661cb4d48d34217d059b3a0970b47ab32b70396223719355"} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a87347e676159f925f532d091c7af7a4f62ac5d1e01cd2f5a192984a4ac74858","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8155cead5addae80c60ae80fda2fe6e7762360a66b946b9f96b8a6aeb142a752","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:28:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:28:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8155cead5addae80c60ae80fda2fe6e7762360a66b946b9f96b8a6aeb142a752"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a87347e676159f925f532d091c7af7a4f62ac5d1e01cd2f5a192984a4ac74858"} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8155cead5addae80c60ae80fda2fe6e7762360a66b946b9f96b8a6aeb142a752","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a86c535d87f73a7405d50223379da0c4ac8ce54795f786efc0194f29be070ccb","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f63f911ad20ec8d58908d7286e0c468baa847b130acbd6b55c4950dfd4f2214e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca49896b8dd759a3e630eb1010ea616f15e75588a9d2b05671523a8e434df7d1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bf65927c2e995159661cb4d48d34217d059b3a0970b47ab32b70396223719355","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a87347e676159f925f532d091c7af7a4f62ac5d1e01cd2f5a192984a4ac74858","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8155cead5addae80c60ae80fda2fe6e7762360a66b946b9f96b8a6aeb142a752","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:28:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:28:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8155cead5addae80c60ae80fda2fe6e7762360a66b946b9f96b8a6aeb142a752"} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8155cead5addae80c60ae80fda2fe6e7762360a66b946b9f96b8a6aeb142a752","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8155cead5addae80c60ae80fda2fe6e7762360a66b946b9f96b8a6aeb142a752","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8155cead5addae80c60ae80fda2fe6e7762360a66b946b9f96b8a6aeb142a752","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8155cead5addae80c60ae80fda2fe6e7762360a66b946b9f96b8a6aeb142a752"} {"level":"debug","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8155cead5addae80c60ae80fda2fe6e7762360a66b946b9f96b8a6aeb142a752","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:28:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:28:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8155cead5addae80c60ae80fda2fe6e7762360a66b946b9f96b8a6aeb142a752"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8155cead5addae80c60ae80fda2fe6e7762360a66b946b9f96b8a6aeb142a752","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8155cead5addae80c60ae80fda2fe6e7762360a66b946b9f96b8a6aeb142a752","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-22T02:28:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-22T02:28:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8155cead5addae80c60ae80fda2fe6e7762360a66b946b9f96b8a6aeb142a752"} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8155cead5addae80c60ae80fda2fe6e7762360a66b946b9f96b8a6aeb142a752","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8155cead5addae80c60ae80fda2fe6e7762360a66b946b9f96b8a6aeb142a752","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8155cead5addae80c60ae80fda2fe6e7762360a66b946b9f96b8a6aeb142a752","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8155cead5addae80c60ae80fda2fe6e7762360a66b946b9f96b8a6aeb142a752"} {"level":"debug","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8155cead5addae80c60ae80fda2fe6e7762360a66b946b9f96b8a6aeb142a752","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-22T02:28:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-22T02:28:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8155cead5addae80c60ae80fda2fe6e7762360a66b946b9f96b8a6aeb142a752"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8155cead5addae80c60ae80fda2fe6e7762360a66b946b9f96b8a6aeb142a752","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8155cead5addae80c60ae80fda2fe6e7762360a66b946b9f96b8a6aeb142a752","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-22T02:28:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8155cead5addae80c60ae80fda2fe6e7762360a66b946b9f96b8a6aeb142a752"} {"level":"info","ts":"2026-07-22T02:28:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf41d336-7697-4552-b1fb-e08c929b5971","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34258","PortSpecifier":{"PortValue":34258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cf41d336-7697-4552-b1fb-e08c929b5971","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:28:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cf41d336-7697-4552-b1fb-e08c929b5971","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34258","PortSpecifier":{"PortValue":34258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687319,"nanos":516933883},"http":{"id":"cf41d336-7697-4552-b1fb-e08c929b5971","method":"POST","headers":{":authority":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:28:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cf41d336-7697-4552-b1fb-e08c929b5971","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:28:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cf41d336-7697-4552-b1fb-e08c929b5971","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea87c7df-7d44-4a6d-a086-2850f9733702","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d0ea8cc2-7b86-4b0b-bbc0-db31674de9e3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe8ebd588071"]}} {"level":"debug","ts":"2026-07-22T02:28:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cf41d336-7697-4552-b1fb-e08c929b5971","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe8ebd588071"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d0ea8cc2-7b86-4b0b-bbc0-db31674de9e3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea87c7df-7d44-4a6d-a086-2850f9733702","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:28:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf41d336-7697-4552-b1fb-e08c929b5971","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf41d336-7697-4552-b1fb-e08c929b5971","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cf41d336-7697-4552-b1fb-e08c929b5971","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-000830/rate-test-model-000830\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-000830/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cf41d336-7697-4552-b1fb-e08c929b5971","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:28:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf41d336-7697-4552-b1fb-e08c929b5971","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:28:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cf41d336-7697-4552-b1fb-e08c929b5971","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:28:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf41d336-7697-4552-b1fb-e08c929b5971","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:28:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cf41d336-7697-4552-b1fb-e08c929b5971","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:28:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"903db0cf-fe7d-4142-b96f-62158ead80d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49958","PortSpecifier":{"PortValue":49958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"903db0cf-fe7d-4142-b96f-62158ead80d7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7eead4.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:28:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"903db0cf-fe7d-4142-b96f-62158ead80d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:49958","PortSpecifier":{"PortValue":49958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687319,"nanos":562665383},"http":{"id":"903db0cf-fe7d-4142-b96f-62158ead80d7","method":"POST","headers":{":authority":"e2e-shared-b-7eead4.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:28:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"903db0cf-fe7d-4142-b96f-62158ead80d7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:28:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"903db0cf-fe7d-4142-b96f-62158ead80d7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea87c7df-7d44-4a6d-a086-2850f9733702","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d0ea8cc2-7b86-4b0b-bbc0-db31674de9e3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe8ebd588071"]}} {"level":"debug","ts":"2026-07-22T02:28:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"903db0cf-fe7d-4142-b96f-62158ead80d7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe8ebd588071"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d0ea8cc2-7b86-4b0b-bbc0-db31674de9e3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea87c7df-7d44-4a6d-a086-2850f9733702","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7eead4.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:28:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"903db0cf-fe7d-4142-b96f-62158ead80d7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"903db0cf-fe7d-4142-b96f-62158ead80d7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"903db0cf-fe7d-4142-b96f-62158ead80d7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7eead4/rate-test-model-7eead4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7eead4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"903db0cf-fe7d-4142-b96f-62158ead80d7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:28:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"903db0cf-fe7d-4142-b96f-62158ead80d7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:28:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"903db0cf-fe7d-4142-b96f-62158ead80d7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-22T02:28:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"903db0cf-fe7d-4142-b96f-62158ead80d7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:28:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"903db0cf-fe7d-4142-b96f-62158ead80d7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:28:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c135636-71d1-42f0-88bc-7a465adf78e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34262","PortSpecifier":{"PortValue":34262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5c135636-71d1-42f0-88bc-7a465adf78e2","method":"POST","path":"/ai-tenant-e2e-shared-a-000830/rate-test-model-000830/v1/completions","host":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:28:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5c135636-71d1-42f0-88bc-7a465adf78e2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:34262","PortSpecifier":{"PortValue":34262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687319,"nanos":604469254},"http":{"id":"5c135636-71d1-42f0-88bc-7a465adf78e2","method":"POST","headers":{":authority":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-000830/rate-test-model-000830/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:28:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5c135636-71d1-42f0-88bc-7a465adf78e2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ULvgSIylbiP6BvKm_7e69l0NROR3fUvHgQ7najmgiwD60WEWKVqf8Ucz2qkn"} {"level":"debug","ts":"2026-07-22T02:28:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5c135636-71d1-42f0-88bc-7a465adf78e2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ULvgSIylbiP6BvKm_7e69l0NROR3fUvHgQ7najmgiwD60WEWKVqf8Ucz2qkn\"}"} {"level":"debug","ts":"2026-07-22T02:28:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5c135636-71d1-42f0-88bc-7a465adf78e2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d061b746-2166-43af-b645-8cd3c228a74b","keyName":"e2e-rate-a-9f1aeb","subscription":"e2e-rate-iso-a-9f1aeb","tenant":"e2e-shared-a-000830","userId":"d061b746-2166-43af-b645-8cd3c228a74b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T02:28:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5c135636-71d1-42f0-88bc-7a465adf78e2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-000830/rate-test-model-000830\",\"requestedSubscription\":\"e2e-rate-iso-a-9f1aeb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T02:28:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5c135636-71d1-42f0-88bc-7a465adf78e2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-000830","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9f1aeb","namespace":"ai-tenant-e2e-shared-a-000830","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-000830/rate-test-model-000830"}} {"level":"debug","ts":"2026-07-22T02:28:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5c135636-71d1-42f0-88bc-7a465adf78e2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:28:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c135636-71d1-42f0-88bc-7a465adf78e2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c135636-71d1-42f0-88bc-7a465adf78e2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c135636-71d1-42f0-88bc-7a465adf78e2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5c135636-71d1-42f0-88bc-7a465adf78e2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-000830/rate-test-model-000830\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-000830/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c135636-71d1-42f0-88bc-7a465adf78e2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:28:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c135636-71d1-42f0-88bc-7a465adf78e2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9f1aeb"} {"level":"debug","ts":"2026-07-22T02:28:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c135636-71d1-42f0-88bc-7a465adf78e2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:28:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5c135636-71d1-42f0-88bc-7a465adf78e2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d061b746-2166-43af-b645-8cd3c228a74b","keyName":"e2e-rate-a-9f1aeb","selected_subscription":"e2e-rate-iso-a-9f1aeb","selected_subscription_key":"ai-tenant-e2e-shared-a-000830/e2e-rate-iso-a-9f1aeb@ai-tenant-e2e-shared-a-000830/rate-test-model-000830","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-000830","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9f1aeb","namespace":"ai-tenant-e2e-shared-a-000830","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-000830/rate-test-model-000830"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T02:28:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c135636-71d1-42f0-88bc-7a465adf78e2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:28:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5c135636-71d1-42f0-88bc-7a465adf78e2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:28:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1912cbea-e4b3-4c95-aaef-677ae85f76fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56894","PortSpecifier":{"PortValue":56894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1912cbea-e4b3-4c95-aaef-677ae85f76fb","method":"POST","path":"/ai-tenant-e2e-shared-a-000830/rate-test-model-000830/v1/completions","host":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:28:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1912cbea-e4b3-4c95-aaef-677ae85f76fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56894","PortSpecifier":{"PortValue":56894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687320,"nanos":669886484},"http":{"id":"1912cbea-e4b3-4c95-aaef-677ae85f76fb","method":"POST","headers":{":authority":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-000830/rate-test-model-000830/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:28:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1912cbea-e4b3-4c95-aaef-677ae85f76fb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ULvgSIylbiP6BvKm_7e69l0NROR3fUvHgQ7najmgiwD60WEWKVqf8Ucz2qkn"} {"level":"debug","ts":"2026-07-22T02:28:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1912cbea-e4b3-4c95-aaef-677ae85f76fb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ULvgSIylbiP6BvKm_7e69l0NROR3fUvHgQ7najmgiwD60WEWKVqf8Ucz2qkn\"}"} {"level":"debug","ts":"2026-07-22T02:28:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1912cbea-e4b3-4c95-aaef-677ae85f76fb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d061b746-2166-43af-b645-8cd3c228a74b","keyName":"e2e-rate-a-9f1aeb","subscription":"e2e-rate-iso-a-9f1aeb","tenant":"e2e-shared-a-000830","userId":"d061b746-2166-43af-b645-8cd3c228a74b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T02:28:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1912cbea-e4b3-4c95-aaef-677ae85f76fb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-000830/rate-test-model-000830\",\"requestedSubscription\":\"e2e-rate-iso-a-9f1aeb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T02:28:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1912cbea-e4b3-4c95-aaef-677ae85f76fb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-000830","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9f1aeb","namespace":"ai-tenant-e2e-shared-a-000830","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-000830/rate-test-model-000830"}} {"level":"debug","ts":"2026-07-22T02:28:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1912cbea-e4b3-4c95-aaef-677ae85f76fb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:28:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1912cbea-e4b3-4c95-aaef-677ae85f76fb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1912cbea-e4b3-4c95-aaef-677ae85f76fb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1912cbea-e4b3-4c95-aaef-677ae85f76fb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1912cbea-e4b3-4c95-aaef-677ae85f76fb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-000830/rate-test-model-000830\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-000830/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1912cbea-e4b3-4c95-aaef-677ae85f76fb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1912cbea-e4b3-4c95-aaef-677ae85f76fb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1912cbea-e4b3-4c95-aaef-677ae85f76fb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9f1aeb"} {"level":"debug","ts":"2026-07-22T02:28:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1912cbea-e4b3-4c95-aaef-677ae85f76fb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d061b746-2166-43af-b645-8cd3c228a74b","keyName":"e2e-rate-a-9f1aeb","selected_subscription":"e2e-rate-iso-a-9f1aeb","selected_subscription_key":"ai-tenant-e2e-shared-a-000830/e2e-rate-iso-a-9f1aeb@ai-tenant-e2e-shared-a-000830/rate-test-model-000830","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-000830","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9f1aeb","namespace":"ai-tenant-e2e-shared-a-000830","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-000830/rate-test-model-000830"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T02:28:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1912cbea-e4b3-4c95-aaef-677ae85f76fb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:28:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1912cbea-e4b3-4c95-aaef-677ae85f76fb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:28:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66b479d4-8288-4b0e-bb74-3ca17a710481","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56896","PortSpecifier":{"PortValue":56896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"66b479d4-8288-4b0e-bb74-3ca17a710481","method":"POST","path":"/ai-tenant-e2e-shared-a-000830/rate-test-model-000830/v1/completions","host":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:28:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66b479d4-8288-4b0e-bb74-3ca17a710481","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56896","PortSpecifier":{"PortValue":56896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687321,"nanos":709580397},"http":{"id":"66b479d4-8288-4b0e-bb74-3ca17a710481","method":"POST","headers":{":authority":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-000830/rate-test-model-000830/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:28:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"66b479d4-8288-4b0e-bb74-3ca17a710481","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ULvgSIylbiP6BvKm_7e69l0NROR3fUvHgQ7najmgiwD60WEWKVqf8Ucz2qkn"} {"level":"debug","ts":"2026-07-22T02:28:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"66b479d4-8288-4b0e-bb74-3ca17a710481","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ULvgSIylbiP6BvKm_7e69l0NROR3fUvHgQ7najmgiwD60WEWKVqf8Ucz2qkn\"}"} {"level":"debug","ts":"2026-07-22T02:28:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"66b479d4-8288-4b0e-bb74-3ca17a710481","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d061b746-2166-43af-b645-8cd3c228a74b","keyName":"e2e-rate-a-9f1aeb","subscription":"e2e-rate-iso-a-9f1aeb","tenant":"e2e-shared-a-000830","userId":"d061b746-2166-43af-b645-8cd3c228a74b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T02:28:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"66b479d4-8288-4b0e-bb74-3ca17a710481","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-000830/rate-test-model-000830\",\"requestedSubscription\":\"e2e-rate-iso-a-9f1aeb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T02:28:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"66b479d4-8288-4b0e-bb74-3ca17a710481","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-000830","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9f1aeb","namespace":"ai-tenant-e2e-shared-a-000830","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-000830/rate-test-model-000830"}} {"level":"debug","ts":"2026-07-22T02:28:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"66b479d4-8288-4b0e-bb74-3ca17a710481","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:28:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66b479d4-8288-4b0e-bb74-3ca17a710481","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66b479d4-8288-4b0e-bb74-3ca17a710481","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66b479d4-8288-4b0e-bb74-3ca17a710481","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66b479d4-8288-4b0e-bb74-3ca17a710481","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-000830/rate-test-model-000830\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-000830/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66b479d4-8288-4b0e-bb74-3ca17a710481","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:28:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66b479d4-8288-4b0e-bb74-3ca17a710481","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:28:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66b479d4-8288-4b0e-bb74-3ca17a710481","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9f1aeb"} {"level":"debug","ts":"2026-07-22T02:28:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66b479d4-8288-4b0e-bb74-3ca17a710481","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d061b746-2166-43af-b645-8cd3c228a74b","keyName":"e2e-rate-a-9f1aeb","selected_subscription":"e2e-rate-iso-a-9f1aeb","selected_subscription_key":"ai-tenant-e2e-shared-a-000830/e2e-rate-iso-a-9f1aeb@ai-tenant-e2e-shared-a-000830/rate-test-model-000830","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-000830","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9f1aeb","namespace":"ai-tenant-e2e-shared-a-000830","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-000830/rate-test-model-000830"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T02:28:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66b479d4-8288-4b0e-bb74-3ca17a710481","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:28:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66b479d4-8288-4b0e-bb74-3ca17a710481","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:28:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a9d44e4-752e-49ab-86bf-cd3d116d522b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56910","PortSpecifier":{"PortValue":56910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3a9d44e4-752e-49ab-86bf-cd3d116d522b","method":"POST","path":"/ai-tenant-e2e-shared-a-000830/rate-test-model-000830/v1/completions","host":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:28:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3a9d44e4-752e-49ab-86bf-cd3d116d522b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56910","PortSpecifier":{"PortValue":56910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687322,"nanos":743587401},"http":{"id":"3a9d44e4-752e-49ab-86bf-cd3d116d522b","method":"POST","headers":{":authority":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-000830/rate-test-model-000830/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:28:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3a9d44e4-752e-49ab-86bf-cd3d116d522b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ULvgSIylbiP6BvKm_7e69l0NROR3fUvHgQ7najmgiwD60WEWKVqf8Ucz2qkn"} {"level":"debug","ts":"2026-07-22T02:28:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3a9d44e4-752e-49ab-86bf-cd3d116d522b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ULvgSIylbiP6BvKm_7e69l0NROR3fUvHgQ7najmgiwD60WEWKVqf8Ucz2qkn\"}"} {"level":"debug","ts":"2026-07-22T02:28:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3a9d44e4-752e-49ab-86bf-cd3d116d522b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d061b746-2166-43af-b645-8cd3c228a74b","keyName":"e2e-rate-a-9f1aeb","subscription":"e2e-rate-iso-a-9f1aeb","tenant":"e2e-shared-a-000830","userId":"d061b746-2166-43af-b645-8cd3c228a74b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T02:28:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3a9d44e4-752e-49ab-86bf-cd3d116d522b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-000830/rate-test-model-000830\",\"requestedSubscription\":\"e2e-rate-iso-a-9f1aeb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T02:28:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3a9d44e4-752e-49ab-86bf-cd3d116d522b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-000830","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9f1aeb","namespace":"ai-tenant-e2e-shared-a-000830","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-000830/rate-test-model-000830"}} {"level":"debug","ts":"2026-07-22T02:28:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3a9d44e4-752e-49ab-86bf-cd3d116d522b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:28:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a9d44e4-752e-49ab-86bf-cd3d116d522b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a9d44e4-752e-49ab-86bf-cd3d116d522b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a9d44e4-752e-49ab-86bf-cd3d116d522b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-000830/rate-test-model-000830\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-000830/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3a9d44e4-752e-49ab-86bf-cd3d116d522b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a9d44e4-752e-49ab-86bf-cd3d116d522b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9f1aeb"} {"level":"debug","ts":"2026-07-22T02:28:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a9d44e4-752e-49ab-86bf-cd3d116d522b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:28:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a9d44e4-752e-49ab-86bf-cd3d116d522b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:28:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3a9d44e4-752e-49ab-86bf-cd3d116d522b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d061b746-2166-43af-b645-8cd3c228a74b","keyName":"e2e-rate-a-9f1aeb","selected_subscription":"e2e-rate-iso-a-9f1aeb","selected_subscription_key":"ai-tenant-e2e-shared-a-000830/e2e-rate-iso-a-9f1aeb@ai-tenant-e2e-shared-a-000830/rate-test-model-000830","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-000830","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9f1aeb","namespace":"ai-tenant-e2e-shared-a-000830","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-000830/rate-test-model-000830"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T02:28:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a9d44e4-752e-49ab-86bf-cd3d116d522b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:28:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3a9d44e4-752e-49ab-86bf-cd3d116d522b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:28:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9f99546-b4eb-4cb1-a885-677403dbaefa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56918","PortSpecifier":{"PortValue":56918}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d9f99546-b4eb-4cb1-a885-677403dbaefa","method":"POST","path":"/ai-tenant-e2e-shared-a-000830/rate-test-model-000830/v1/completions","host":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:28:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9f99546-b4eb-4cb1-a885-677403dbaefa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56918","PortSpecifier":{"PortValue":56918}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687323,"nanos":782493027},"http":{"id":"d9f99546-b4eb-4cb1-a885-677403dbaefa","method":"POST","headers":{":authority":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-000830/rate-test-model-000830/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:28:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d9f99546-b4eb-4cb1-a885-677403dbaefa","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ULvgSIylbiP6BvKm_7e69l0NROR3fUvHgQ7najmgiwD60WEWKVqf8Ucz2qkn"} {"level":"debug","ts":"2026-07-22T02:28:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d9f99546-b4eb-4cb1-a885-677403dbaefa","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ULvgSIylbiP6BvKm_7e69l0NROR3fUvHgQ7najmgiwD60WEWKVqf8Ucz2qkn\"}"} {"level":"debug","ts":"2026-07-22T02:28:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d9f99546-b4eb-4cb1-a885-677403dbaefa","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d061b746-2166-43af-b645-8cd3c228a74b","keyName":"e2e-rate-a-9f1aeb","subscription":"e2e-rate-iso-a-9f1aeb","tenant":"e2e-shared-a-000830","userId":"d061b746-2166-43af-b645-8cd3c228a74b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T02:28:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d9f99546-b4eb-4cb1-a885-677403dbaefa","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-000830/rate-test-model-000830\",\"requestedSubscription\":\"e2e-rate-iso-a-9f1aeb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T02:28:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d9f99546-b4eb-4cb1-a885-677403dbaefa","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-000830","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9f1aeb","namespace":"ai-tenant-e2e-shared-a-000830","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-000830/rate-test-model-000830"}} {"level":"debug","ts":"2026-07-22T02:28:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d9f99546-b4eb-4cb1-a885-677403dbaefa","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:28:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9f99546-b4eb-4cb1-a885-677403dbaefa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9f99546-b4eb-4cb1-a885-677403dbaefa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9f99546-b4eb-4cb1-a885-677403dbaefa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-000830/rate-test-model-000830\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-000830/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9f99546-b4eb-4cb1-a885-677403dbaefa","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9f99546-b4eb-4cb1-a885-677403dbaefa","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:28:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9f99546-b4eb-4cb1-a885-677403dbaefa","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:28:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9f99546-b4eb-4cb1-a885-677403dbaefa","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9f1aeb"} {"level":"debug","ts":"2026-07-22T02:28:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9f99546-b4eb-4cb1-a885-677403dbaefa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d061b746-2166-43af-b645-8cd3c228a74b","keyName":"e2e-rate-a-9f1aeb","selected_subscription":"e2e-rate-iso-a-9f1aeb","selected_subscription_key":"ai-tenant-e2e-shared-a-000830/e2e-rate-iso-a-9f1aeb@ai-tenant-e2e-shared-a-000830/rate-test-model-000830","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-000830","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9f1aeb","namespace":"ai-tenant-e2e-shared-a-000830","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-000830/rate-test-model-000830"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T02:28:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9f99546-b4eb-4cb1-a885-677403dbaefa","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:28:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9f99546-b4eb-4cb1-a885-677403dbaefa","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:28:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30c1e287-d96a-4171-9afd-cc64baf51be6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56924","PortSpecifier":{"PortValue":56924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"30c1e287-d96a-4171-9afd-cc64baf51be6","method":"POST","path":"/ai-tenant-e2e-shared-a-000830/rate-test-model-000830/v1/completions","host":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:28:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30c1e287-d96a-4171-9afd-cc64baf51be6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56924","PortSpecifier":{"PortValue":56924}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687324,"nanos":820704411},"http":{"id":"30c1e287-d96a-4171-9afd-cc64baf51be6","method":"POST","headers":{":authority":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-000830/rate-test-model-000830/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:28:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"30c1e287-d96a-4171-9afd-cc64baf51be6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ULvgSIylbiP6BvKm_7e69l0NROR3fUvHgQ7najmgiwD60WEWKVqf8Ucz2qkn"} {"level":"debug","ts":"2026-07-22T02:28:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"30c1e287-d96a-4171-9afd-cc64baf51be6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ULvgSIylbiP6BvKm_7e69l0NROR3fUvHgQ7najmgiwD60WEWKVqf8Ucz2qkn\"}"} {"level":"debug","ts":"2026-07-22T02:28:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"30c1e287-d96a-4171-9afd-cc64baf51be6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d061b746-2166-43af-b645-8cd3c228a74b","keyName":"e2e-rate-a-9f1aeb","subscription":"e2e-rate-iso-a-9f1aeb","tenant":"e2e-shared-a-000830","userId":"d061b746-2166-43af-b645-8cd3c228a74b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T02:28:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"30c1e287-d96a-4171-9afd-cc64baf51be6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-000830/rate-test-model-000830\",\"requestedSubscription\":\"e2e-rate-iso-a-9f1aeb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T02:28:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"30c1e287-d96a-4171-9afd-cc64baf51be6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-000830","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9f1aeb","namespace":"ai-tenant-e2e-shared-a-000830","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-000830/rate-test-model-000830"}} {"level":"debug","ts":"2026-07-22T02:28:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"30c1e287-d96a-4171-9afd-cc64baf51be6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:28:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30c1e287-d96a-4171-9afd-cc64baf51be6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30c1e287-d96a-4171-9afd-cc64baf51be6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30c1e287-d96a-4171-9afd-cc64baf51be6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-000830/rate-test-model-000830\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-000830/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30c1e287-d96a-4171-9afd-cc64baf51be6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30c1e287-d96a-4171-9afd-cc64baf51be6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:28:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30c1e287-d96a-4171-9afd-cc64baf51be6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:28:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30c1e287-d96a-4171-9afd-cc64baf51be6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9f1aeb"} {"level":"debug","ts":"2026-07-22T02:28:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30c1e287-d96a-4171-9afd-cc64baf51be6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d061b746-2166-43af-b645-8cd3c228a74b","keyName":"e2e-rate-a-9f1aeb","selected_subscription":"e2e-rate-iso-a-9f1aeb","selected_subscription_key":"ai-tenant-e2e-shared-a-000830/e2e-rate-iso-a-9f1aeb@ai-tenant-e2e-shared-a-000830/rate-test-model-000830","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-000830","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9f1aeb","namespace":"ai-tenant-e2e-shared-a-000830","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-000830/rate-test-model-000830"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T02:28:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30c1e287-d96a-4171-9afd-cc64baf51be6","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:28:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30c1e287-d96a-4171-9afd-cc64baf51be6","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:28:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5007d4b1-86f3-48e9-af81-fda8cc565c4d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56940","PortSpecifier":{"PortValue":56940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5007d4b1-86f3-48e9-af81-fda8cc565c4d","method":"POST","path":"/ai-tenant-e2e-shared-a-000830/rate-test-model-000830/v1/completions","host":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:28:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5007d4b1-86f3-48e9-af81-fda8cc565c4d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56940","PortSpecifier":{"PortValue":56940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687325,"nanos":858806221},"http":{"id":"5007d4b1-86f3-48e9-af81-fda8cc565c4d","method":"POST","headers":{":authority":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-000830/rate-test-model-000830/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:28:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5007d4b1-86f3-48e9-af81-fda8cc565c4d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ULvgSIylbiP6BvKm_7e69l0NROR3fUvHgQ7najmgiwD60WEWKVqf8Ucz2qkn"} {"level":"debug","ts":"2026-07-22T02:28:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5007d4b1-86f3-48e9-af81-fda8cc565c4d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ULvgSIylbiP6BvKm_7e69l0NROR3fUvHgQ7najmgiwD60WEWKVqf8Ucz2qkn\"}"} {"level":"debug","ts":"2026-07-22T02:28:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5007d4b1-86f3-48e9-af81-fda8cc565c4d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d061b746-2166-43af-b645-8cd3c228a74b","keyName":"e2e-rate-a-9f1aeb","subscription":"e2e-rate-iso-a-9f1aeb","tenant":"e2e-shared-a-000830","userId":"d061b746-2166-43af-b645-8cd3c228a74b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T02:28:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5007d4b1-86f3-48e9-af81-fda8cc565c4d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-000830/rate-test-model-000830\",\"requestedSubscription\":\"e2e-rate-iso-a-9f1aeb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T02:28:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5007d4b1-86f3-48e9-af81-fda8cc565c4d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-000830","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9f1aeb","namespace":"ai-tenant-e2e-shared-a-000830","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-000830/rate-test-model-000830"}} {"level":"debug","ts":"2026-07-22T02:28:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5007d4b1-86f3-48e9-af81-fda8cc565c4d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:28:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5007d4b1-86f3-48e9-af81-fda8cc565c4d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5007d4b1-86f3-48e9-af81-fda8cc565c4d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5007d4b1-86f3-48e9-af81-fda8cc565c4d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5007d4b1-86f3-48e9-af81-fda8cc565c4d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-000830/rate-test-model-000830\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-000830/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5007d4b1-86f3-48e9-af81-fda8cc565c4d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:28:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5007d4b1-86f3-48e9-af81-fda8cc565c4d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:28:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5007d4b1-86f3-48e9-af81-fda8cc565c4d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9f1aeb"} {"level":"debug","ts":"2026-07-22T02:28:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5007d4b1-86f3-48e9-af81-fda8cc565c4d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d061b746-2166-43af-b645-8cd3c228a74b","keyName":"e2e-rate-a-9f1aeb","selected_subscription":"e2e-rate-iso-a-9f1aeb","selected_subscription_key":"ai-tenant-e2e-shared-a-000830/e2e-rate-iso-a-9f1aeb@ai-tenant-e2e-shared-a-000830/rate-test-model-000830","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-000830","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9f1aeb","namespace":"ai-tenant-e2e-shared-a-000830","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-000830/rate-test-model-000830"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T02:28:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5007d4b1-86f3-48e9-af81-fda8cc565c4d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:28:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5007d4b1-86f3-48e9-af81-fda8cc565c4d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:28:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f99e42cc-4803-45a3-b3af-9dcdab6404fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56946","PortSpecifier":{"PortValue":56946}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f99e42cc-4803-45a3-b3af-9dcdab6404fe","method":"POST","path":"/ai-tenant-e2e-shared-a-000830/rate-test-model-000830/v1/completions","host":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:28:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f99e42cc-4803-45a3-b3af-9dcdab6404fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:56946","PortSpecifier":{"PortValue":56946}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687326,"nanos":894986420},"http":{"id":"f99e42cc-4803-45a3-b3af-9dcdab6404fe","method":"POST","headers":{":authority":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-000830/rate-test-model-000830/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:28:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f99e42cc-4803-45a3-b3af-9dcdab6404fe","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ULvgSIylbiP6BvKm_7e69l0NROR3fUvHgQ7najmgiwD60WEWKVqf8Ucz2qkn"} {"level":"debug","ts":"2026-07-22T02:28:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f99e42cc-4803-45a3-b3af-9dcdab6404fe","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ULvgSIylbiP6BvKm_7e69l0NROR3fUvHgQ7najmgiwD60WEWKVqf8Ucz2qkn\"}"} {"level":"debug","ts":"2026-07-22T02:28:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f99e42cc-4803-45a3-b3af-9dcdab6404fe","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d061b746-2166-43af-b645-8cd3c228a74b","keyName":"e2e-rate-a-9f1aeb","subscription":"e2e-rate-iso-a-9f1aeb","tenant":"e2e-shared-a-000830","userId":"d061b746-2166-43af-b645-8cd3c228a74b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T02:28:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f99e42cc-4803-45a3-b3af-9dcdab6404fe","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-000830/rate-test-model-000830\",\"requestedSubscription\":\"e2e-rate-iso-a-9f1aeb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T02:28:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f99e42cc-4803-45a3-b3af-9dcdab6404fe","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-000830","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9f1aeb","namespace":"ai-tenant-e2e-shared-a-000830","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-000830/rate-test-model-000830"}} {"level":"debug","ts":"2026-07-22T02:28:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f99e42cc-4803-45a3-b3af-9dcdab6404fe","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:28:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f99e42cc-4803-45a3-b3af-9dcdab6404fe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f99e42cc-4803-45a3-b3af-9dcdab6404fe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f99e42cc-4803-45a3-b3af-9dcdab6404fe","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f99e42cc-4803-45a3-b3af-9dcdab6404fe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-000830/rate-test-model-000830\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-000830/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f99e42cc-4803-45a3-b3af-9dcdab6404fe","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:28:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f99e42cc-4803-45a3-b3af-9dcdab6404fe","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:28:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f99e42cc-4803-45a3-b3af-9dcdab6404fe","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9f1aeb"} {"level":"debug","ts":"2026-07-22T02:28:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f99e42cc-4803-45a3-b3af-9dcdab6404fe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d061b746-2166-43af-b645-8cd3c228a74b","keyName":"e2e-rate-a-9f1aeb","selected_subscription":"e2e-rate-iso-a-9f1aeb","selected_subscription_key":"ai-tenant-e2e-shared-a-000830/e2e-rate-iso-a-9f1aeb@ai-tenant-e2e-shared-a-000830/rate-test-model-000830","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-000830","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9f1aeb","namespace":"ai-tenant-e2e-shared-a-000830","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-000830/rate-test-model-000830"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T02:28:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f99e42cc-4803-45a3-b3af-9dcdab6404fe","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:28:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f99e42cc-4803-45a3-b3af-9dcdab6404fe","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:28:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0b202bc3-d019-43ca-989c-ec85286ec90c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55504","PortSpecifier":{"PortValue":55504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0b202bc3-d019-43ca-989c-ec85286ec90c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:28:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0b202bc3-d019-43ca-989c-ec85286ec90c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55504","PortSpecifier":{"PortValue":55504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687335,"nanos":728047443},"http":{"id":"0b202bc3-d019-43ca-989c-ec85286ec90c","method":"POST","headers":{":authority":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:28:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0b202bc3-d019-43ca-989c-ec85286ec90c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:28:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0b202bc3-d019-43ca-989c-ec85286ec90c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea87c7df-7d44-4a6d-a086-2850f9733702","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d0ea8cc2-7b86-4b0b-bbc0-db31674de9e3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe8ebd588071"]}} {"level":"debug","ts":"2026-07-22T02:28:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0b202bc3-d019-43ca-989c-ec85286ec90c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe8ebd588071"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d0ea8cc2-7b86-4b0b-bbc0-db31674de9e3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea87c7df-7d44-4a6d-a086-2850f9733702","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.54:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:28:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b202bc3-d019-43ca-989c-ec85286ec90c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b202bc3-d019-43ca-989c-ec85286ec90c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0b202bc3-d019-43ca-989c-ec85286ec90c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-000830/rate-test-model-000830\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-000830/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0b202bc3-d019-43ca-989c-ec85286ec90c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:28:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b202bc3-d019-43ca-989c-ec85286ec90c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:28:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0b202bc3-d019-43ca-989c-ec85286ec90c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-22T02:28:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0b202bc3-d019-43ca-989c-ec85286ec90c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:28:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0b202bc3-d019-43ca-989c-ec85286ec90c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:28:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5712fdad-6dec-4d1e-98b9-e560e3b04997","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60260","PortSpecifier":{"PortValue":60260}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5712fdad-6dec-4d1e-98b9-e560e3b04997","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-7eead4.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:28:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5712fdad-6dec-4d1e-98b9-e560e3b04997","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60260","PortSpecifier":{"PortValue":60260}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687335,"nanos":764505544},"http":{"id":"5712fdad-6dec-4d1e-98b9-e560e3b04997","method":"POST","headers":{":authority":"e2e-shared-b-7eead4.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:28:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5712fdad-6dec-4d1e-98b9-e560e3b04997","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-22T02:28:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5712fdad-6dec-4d1e-98b9-e560e3b04997","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea87c7df-7d44-4a6d-a086-2850f9733702","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=d0ea8cc2-7b86-4b0b-bbc0-db31674de9e3"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe8ebd588071"]}} {"level":"debug","ts":"2026-07-22T02:28:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5712fdad-6dec-4d1e-98b9-e560e3b04997","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/fe8ebd588071"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=d0ea8cc2-7b86-4b0b-bbc0-db31674de9e3"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea87c7df-7d44-4a6d-a086-2850f9733702","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-7eead4.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:28:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5712fdad-6dec-4d1e-98b9-e560e3b04997","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5712fdad-6dec-4d1e-98b9-e560e3b04997","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5712fdad-6dec-4d1e-98b9-e560e3b04997","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7eead4/rate-test-model-7eead4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7eead4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5712fdad-6dec-4d1e-98b9-e560e3b04997","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-22T02:28:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5712fdad-6dec-4d1e-98b9-e560e3b04997","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:28:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5712fdad-6dec-4d1e-98b9-e560e3b04997","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-22T02:28:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5712fdad-6dec-4d1e-98b9-e560e3b04997","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:28:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5712fdad-6dec-4d1e-98b9-e560e3b04997","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:28:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0632b6d-479b-44fc-8f8c-2f48ad162333","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55520","PortSpecifier":{"PortValue":55520}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a0632b6d-479b-44fc-8f8c-2f48ad162333","method":"POST","path":"/ai-tenant-e2e-shared-a-000830/rate-test-model-000830/v1/completions","host":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:28:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0632b6d-479b-44fc-8f8c-2f48ad162333","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55520","PortSpecifier":{"PortValue":55520}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687335,"nanos":801176604},"http":{"id":"a0632b6d-479b-44fc-8f8c-2f48ad162333","method":"POST","headers":{":authority":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-000830/rate-test-model-000830/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:28:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a0632b6d-479b-44fc-8f8c-2f48ad162333","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yQajz1zwuXoyfBW0_709g5ocNDjjdpsLWMaUA0L9K69kHgKZ2U2uY9fFFMC7"} {"level":"debug","ts":"2026-07-22T02:28:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a0632b6d-479b-44fc-8f8c-2f48ad162333","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yQajz1zwuXoyfBW0_709g5ocNDjjdpsLWMaUA0L9K69kHgKZ2U2uY9fFFMC7\"}"} {"level":"debug","ts":"2026-07-22T02:28:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a0632b6d-479b-44fc-8f8c-2f48ad162333","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"486fe623-21d7-4d24-bae4-e1a6aa550f09","keyName":"e2e-rate-a-bd22ee","subscription":"e2e-rate-iso-a-bd22ee","tenant":"e2e-shared-a-000830","userId":"486fe623-21d7-4d24-bae4-e1a6aa550f09","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T02:28:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a0632b6d-479b-44fc-8f8c-2f48ad162333","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-000830/rate-test-model-000830\",\"requestedSubscription\":\"e2e-rate-iso-a-bd22ee\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T02:28:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a0632b6d-479b-44fc-8f8c-2f48ad162333","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-000830","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bd22ee","namespace":"ai-tenant-e2e-shared-a-000830","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-000830/rate-test-model-000830"}} {"level":"debug","ts":"2026-07-22T02:28:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a0632b6d-479b-44fc-8f8c-2f48ad162333","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:28:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0632b6d-479b-44fc-8f8c-2f48ad162333","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0632b6d-479b-44fc-8f8c-2f48ad162333","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0632b6d-479b-44fc-8f8c-2f48ad162333","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0632b6d-479b-44fc-8f8c-2f48ad162333","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-000830/rate-test-model-000830\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-000830/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0632b6d-479b-44fc-8f8c-2f48ad162333","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:28:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0632b6d-479b-44fc-8f8c-2f48ad162333","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bd22ee"} {"level":"debug","ts":"2026-07-22T02:28:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0632b6d-479b-44fc-8f8c-2f48ad162333","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:28:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0632b6d-479b-44fc-8f8c-2f48ad162333","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"486fe623-21d7-4d24-bae4-e1a6aa550f09","keyName":"e2e-rate-a-bd22ee","selected_subscription":"e2e-rate-iso-a-bd22ee","selected_subscription_key":"ai-tenant-e2e-shared-a-000830/e2e-rate-iso-a-bd22ee@ai-tenant-e2e-shared-a-000830/rate-test-model-000830","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-000830","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bd22ee","namespace":"ai-tenant-e2e-shared-a-000830","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-000830/rate-test-model-000830"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T02:28:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0632b6d-479b-44fc-8f8c-2f48ad162333","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:28:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0632b6d-479b-44fc-8f8c-2f48ad162333","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:28:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a7baec4c-f036-4eec-a1ab-b0ad800dbd7d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55524","PortSpecifier":{"PortValue":55524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a7baec4c-f036-4eec-a1ab-b0ad800dbd7d","method":"POST","path":"/ai-tenant-e2e-shared-a-000830/rate-test-model-000830/v1/completions","host":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:28:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a7baec4c-f036-4eec-a1ab-b0ad800dbd7d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55524","PortSpecifier":{"PortValue":55524}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687336,"nanos":837249864},"http":{"id":"a7baec4c-f036-4eec-a1ab-b0ad800dbd7d","method":"POST","headers":{":authority":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-000830/rate-test-model-000830/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:28:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a7baec4c-f036-4eec-a1ab-b0ad800dbd7d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yQajz1zwuXoyfBW0_709g5ocNDjjdpsLWMaUA0L9K69kHgKZ2U2uY9fFFMC7"} {"level":"debug","ts":"2026-07-22T02:28:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a7baec4c-f036-4eec-a1ab-b0ad800dbd7d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yQajz1zwuXoyfBW0_709g5ocNDjjdpsLWMaUA0L9K69kHgKZ2U2uY9fFFMC7\"}"} {"level":"debug","ts":"2026-07-22T02:28:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a7baec4c-f036-4eec-a1ab-b0ad800dbd7d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"486fe623-21d7-4d24-bae4-e1a6aa550f09","keyName":"e2e-rate-a-bd22ee","subscription":"e2e-rate-iso-a-bd22ee","tenant":"e2e-shared-a-000830","userId":"486fe623-21d7-4d24-bae4-e1a6aa550f09","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T02:28:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a7baec4c-f036-4eec-a1ab-b0ad800dbd7d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-000830/rate-test-model-000830\",\"requestedSubscription\":\"e2e-rate-iso-a-bd22ee\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T02:28:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a7baec4c-f036-4eec-a1ab-b0ad800dbd7d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-000830","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bd22ee","namespace":"ai-tenant-e2e-shared-a-000830","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-000830/rate-test-model-000830"}} {"level":"debug","ts":"2026-07-22T02:28:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a7baec4c-f036-4eec-a1ab-b0ad800dbd7d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:28:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7baec4c-f036-4eec-a1ab-b0ad800dbd7d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7baec4c-f036-4eec-a1ab-b0ad800dbd7d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7baec4c-f036-4eec-a1ab-b0ad800dbd7d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a7baec4c-f036-4eec-a1ab-b0ad800dbd7d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-000830/rate-test-model-000830\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-000830/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7baec4c-f036-4eec-a1ab-b0ad800dbd7d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:28:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7baec4c-f036-4eec-a1ab-b0ad800dbd7d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bd22ee"} {"level":"debug","ts":"2026-07-22T02:28:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7baec4c-f036-4eec-a1ab-b0ad800dbd7d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:28:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a7baec4c-f036-4eec-a1ab-b0ad800dbd7d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"486fe623-21d7-4d24-bae4-e1a6aa550f09","keyName":"e2e-rate-a-bd22ee","selected_subscription":"e2e-rate-iso-a-bd22ee","selected_subscription_key":"ai-tenant-e2e-shared-a-000830/e2e-rate-iso-a-bd22ee@ai-tenant-e2e-shared-a-000830/rate-test-model-000830","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-000830","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bd22ee","namespace":"ai-tenant-e2e-shared-a-000830","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-000830/rate-test-model-000830"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T02:28:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a7baec4c-f036-4eec-a1ab-b0ad800dbd7d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:28:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a7baec4c-f036-4eec-a1ab-b0ad800dbd7d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:28:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32aee0fb-a3ce-4506-9a58-58712678c1e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55530","PortSpecifier":{"PortValue":55530}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"32aee0fb-a3ce-4506-9a58-58712678c1e5","method":"POST","path":"/ai-tenant-e2e-shared-a-000830/rate-test-model-000830/v1/completions","host":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:28:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"32aee0fb-a3ce-4506-9a58-58712678c1e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:55530","PortSpecifier":{"PortValue":55530}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.54:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687337,"nanos":871594202},"http":{"id":"32aee0fb-a3ce-4506-9a58-58712678c1e5","method":"POST","headers":{":authority":"e2e-shared-a-000830.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-000830/rate-test-model-000830/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:28:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"32aee0fb-a3ce-4506-9a58-58712678c1e5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-yQajz1zwuXoyfBW0_709g5ocNDjjdpsLWMaUA0L9K69kHgKZ2U2uY9fFFMC7"} {"level":"debug","ts":"2026-07-22T02:28:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"32aee0fb-a3ce-4506-9a58-58712678c1e5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-yQajz1zwuXoyfBW0_709g5ocNDjjdpsLWMaUA0L9K69kHgKZ2U2uY9fFFMC7\"}"} {"level":"debug","ts":"2026-07-22T02:28:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"32aee0fb-a3ce-4506-9a58-58712678c1e5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"486fe623-21d7-4d24-bae4-e1a6aa550f09","keyName":"e2e-rate-a-bd22ee","subscription":"e2e-rate-iso-a-bd22ee","tenant":"e2e-shared-a-000830","userId":"486fe623-21d7-4d24-bae4-e1a6aa550f09","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T02:28:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"32aee0fb-a3ce-4506-9a58-58712678c1e5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-000830/rate-test-model-000830\",\"requestedSubscription\":\"e2e-rate-iso-a-bd22ee\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T02:28:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"32aee0fb-a3ce-4506-9a58-58712678c1e5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-000830.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-000830","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bd22ee","namespace":"ai-tenant-e2e-shared-a-000830","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-000830/rate-test-model-000830"}} {"level":"debug","ts":"2026-07-22T02:28:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"32aee0fb-a3ce-4506-9a58-58712678c1e5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:28:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32aee0fb-a3ce-4506-9a58-58712678c1e5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32aee0fb-a3ce-4506-9a58-58712678c1e5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32aee0fb-a3ce-4506-9a58-58712678c1e5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"32aee0fb-a3ce-4506-9a58-58712678c1e5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-000830/rate-test-model-000830\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-000830/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32aee0fb-a3ce-4506-9a58-58712678c1e5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:28:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32aee0fb-a3ce-4506-9a58-58712678c1e5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-bd22ee"} {"level":"debug","ts":"2026-07-22T02:28:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32aee0fb-a3ce-4506-9a58-58712678c1e5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:28:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"32aee0fb-a3ce-4506-9a58-58712678c1e5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"486fe623-21d7-4d24-bae4-e1a6aa550f09","keyName":"e2e-rate-a-bd22ee","selected_subscription":"e2e-rate-iso-a-bd22ee","selected_subscription_key":"ai-tenant-e2e-shared-a-000830/e2e-rate-iso-a-bd22ee@ai-tenant-e2e-shared-a-000830/rate-test-model-000830","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-000830","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-bd22ee","namespace":"ai-tenant-e2e-shared-a-000830","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-a-000830/rate-test-model-000830"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T02:28:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32aee0fb-a3ce-4506-9a58-58712678c1e5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:28:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"32aee0fb-a3ce-4506-9a58-58712678c1e5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:28:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5185d47e-db2f-4719-bda8-5b50ec195006","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60274","PortSpecifier":{"PortValue":60274}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5185d47e-db2f-4719-bda8-5b50ec195006","method":"POST","path":"/ai-tenant-e2e-shared-b-7eead4/rate-test-model-7eead4/v1/completions","host":"e2e-shared-b-7eead4.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-22T02:28:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5185d47e-db2f-4719-bda8-5b50ec195006","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.14:60274","PortSpecifier":{"PortValue":60274}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784687337,"nanos":906198890},"http":{"id":"5185d47e-db2f-4719-bda8-5b50ec195006","method":"POST","headers":{":authority":"e2e-shared-b-7eead4.apps.baac7630-667b-48fb-8c97-fe8ebd588071.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-7eead4/rate-test-model-7eead4/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:28:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5185d47e-db2f-4719-bda8-5b50ec195006","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-INN1BnZZifqih9mm_Y0XkElbmFzWqvdQsUFtuVA5SqMKA3Um12Vb5ohhp4Pd"} {"level":"debug","ts":"2026-07-22T02:28:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5185d47e-db2f-4719-bda8-5b50ec195006","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-7eead4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-INN1BnZZifqih9mm_Y0XkElbmFzWqvdQsUFtuVA5SqMKA3Um12Vb5ohhp4Pd\"}"} {"level":"debug","ts":"2026-07-22T02:28:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5185d47e-db2f-4719-bda8-5b50ec195006","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-7eead4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f2230157-611f-4b60-901b-a61264ad282f","keyName":"e2e-rate-b-bd22ee","subscription":"e2e-rate-iso-b-bd22ee","tenant":"e2e-shared-b-7eead4","userId":"f2230157-611f-4b60-901b-a61264ad282f","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-22T02:28:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5185d47e-db2f-4719-bda8-5b50ec195006","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-7eead4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-7eead4/rate-test-model-7eead4\",\"requestedSubscription\":\"e2e-rate-iso-b-bd22ee\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-22T02:28:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5185d47e-db2f-4719-bda8-5b50ec195006","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-7eead4.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-7eead4","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-bd22ee","namespace":"ai-tenant-e2e-shared-b-7eead4","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-7eead4/rate-test-model-7eead4"}} {"level":"debug","ts":"2026-07-22T02:28:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5185d47e-db2f-4719-bda8-5b50ec195006","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-22T02:28:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5185d47e-db2f-4719-bda8-5b50ec195006","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5185d47e-db2f-4719-bda8-5b50ec195006","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5185d47e-db2f-4719-bda8-5b50ec195006","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5185d47e-db2f-4719-bda8-5b50ec195006","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-7eead4/rate-test-model-7eead4\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-7eead4/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-22T02:28:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5185d47e-db2f-4719-bda8-5b50ec195006","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-bd22ee"} {"level":"debug","ts":"2026-07-22T02:28:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5185d47e-db2f-4719-bda8-5b50ec195006","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-22T02:28:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5185d47e-db2f-4719-bda8-5b50ec195006","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-22T02:28:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5185d47e-db2f-4719-bda8-5b50ec195006","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f2230157-611f-4b60-901b-a61264ad282f","keyName":"e2e-rate-b-bd22ee","selected_subscription":"e2e-rate-iso-b-bd22ee","selected_subscription_key":"ai-tenant-e2e-shared-b-7eead4/e2e-rate-iso-b-bd22ee@ai-tenant-e2e-shared-b-7eead4/rate-test-model-7eead4","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-7eead4","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-bd22ee","namespace":"ai-tenant-e2e-shared-b-7eead4","phase":"Active","ready":true,"resolvedModel":"ai-tenant-e2e-shared-b-7eead4/rate-test-model-7eead4"},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-22T02:28:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5185d47e-db2f-4719-bda8-5b50ec195006","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-22T02:28:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5185d47e-db2f-4719-bda8-5b50ec195006","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-22T02:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b73d78c2fd1225195efc8a2d5c84696f44b8b29a6d2696ef9f4b80485443f2bb"} {"level":"info","ts":"2026-07-22T02:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/017bef8ad369aedf4693a42b618314a1f78b40210183a1a3e12c6c4db526667e"} {"level":"info","ts":"2026-07-22T02:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5fdbf5479088293464dd4dabcef1ab9234e359edec1f2e22b5addffea335a85f"} {"level":"info","ts":"2026-07-22T02:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d4f746357f835389e04bd5a96522f198f7d47065d83d9523850f6afdcd8db8b3"} {"level":"info","ts":"2026-07-22T02:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f63f911ad20ec8d58908d7286e0c468baa847b130acbd6b55c4950dfd4f2214e"} {"level":"info","ts":"2026-07-22T02:29:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c34bed99faca4ccf093c04d0bd2d92f45d470b0daf4cae1f07e7136557c40a09"} {"level":"info","ts":"2026-07-22T02:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3edc01bd2023bb40ffd5a0f803000b23139b11c8fcbd6de50e15105135bb5dfe"} {"level":"info","ts":"2026-07-22T02:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bf65927c2e995159661cb4d48d34217d059b3a0970b47ab32b70396223719355"} {"level":"info","ts":"2026-07-22T02:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98d1603eab1b1b64f57908cf3ce3206543ba8a79c2670cd063a7e58d4ec62a48"} {"level":"info","ts":"2026-07-22T02:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8728ada71d19245c5805e710ea412b706bb84cb988be99570b7c92cac12d02fd"} {"level":"info","ts":"2026-07-22T02:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a86c535d87f73a7405d50223379da0c4ac8ce54795f786efc0194f29be070ccb"} {"level":"info","ts":"2026-07-22T02:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/47c67cae0f9cf1600d05bf217ab25a874bbafb2d98b28dfc1d5590c9e9683772"} {"level":"info","ts":"2026-07-22T02:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0106e4f1216de4e8b2e96af0848f40cfa078e4a51b2808215072722924399f8a"} {"level":"info","ts":"2026-07-22T02:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e05aa5b212f5a5228cfb7fc933b146391673a6a8a35766c7a79ed7a54262847"} {"level":"info","ts":"2026-07-22T02:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/24990eeeefe2b26fd1e764edf3e286550b5ad5aaf0d8dd9fdbca10c0d719920d"} {"level":"info","ts":"2026-07-22T02:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6605766b33397fe445fbf5f984eb76a25792129c410c06dedafacd2ba447ec0"} {"level":"info","ts":"2026-07-22T02:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca49896b8dd759a3e630eb1010ea616f15e75588a9d2b05671523a8e434df7d1"} {"level":"info","ts":"2026-07-22T02:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab15274616586b718376ae73e81534777714f2b93e19d8b3e074ed577dee096f"} {"level":"info","ts":"2026-07-22T02:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8155cead5addae80c60ae80fda2fe6e7762360a66b946b9f96b8a6aeb142a752"} {"level":"info","ts":"2026-07-22T02:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6b0101f48d3950398a9ba432fbcdb8431bb1c98f78ee0c22f78c64e646bdd664"} {"level":"info","ts":"2026-07-22T02:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1052ea21b2bde5c25b38961de7418c5ec82a5472cef64ce758524569d5140f77"} {"level":"info","ts":"2026-07-22T02:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a87347e676159f925f532d091c7af7a4f62ac5d1e01cd2f5a192984a4ac74858"} {"level":"info","ts":"2026-07-22T02:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5481d28448c620ebc6126ed4ad453403cdf551a9ca98012f0c48af3efabdeaa6"} {"level":"info","ts":"2026-07-22T02:29:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1be94ebf031df9476f3ed66e20d33d184b3ebd42a5b54d97f0677924ed736f47"}