--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"191e955ae10ba6b89b9e087656a4e632cbdf616d6378a506f0d6a26d06610aed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea43713390ba15e83d1e5bf405ad05a3cb807a1cd2f0ea72d1bcac36a111b62d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea43713390ba15e83d1e5bf405ad05a3cb807a1cd2f0ea72d1bcac36a111b62d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d777209872a196c48fdbfea433784cb3ab6a08fff701c2dc22e1696aac0c258","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d777209872a196c48fdbfea433784cb3ab6a08fff701c2dc22e1696aac0c258"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea43713390ba15e83d1e5bf405ad05a3cb807a1cd2f0ea72d1bcac36a111b62d"} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d777209872a196c48fdbfea433784cb3ab6a08fff701c2dc22e1696aac0c258","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"191e955ae10ba6b89b9e087656a4e632cbdf616d6378a506f0d6a26d06610aed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"191e955ae10ba6b89b9e087656a4e632cbdf616d6378a506f0d6a26d06610aed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea43713390ba15e83d1e5bf405ad05a3cb807a1cd2f0ea72d1bcac36a111b62d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea43713390ba15e83d1e5bf405ad05a3cb807a1cd2f0ea72d1bcac36a111b62d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/191e955ae10ba6b89b9e087656a4e632cbdf616d6378a506f0d6a26d06610aed"} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea43713390ba15e83d1e5bf405ad05a3cb807a1cd2f0ea72d1bcac36a111b62d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d777209872a196c48fdbfea433784cb3ab6a08fff701c2dc22e1696aac0c258","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d777209872a196c48fdbfea433784cb3ab6a08fff701c2dc22e1696aac0c258","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"191e955ae10ba6b89b9e087656a4e632cbdf616d6378a506f0d6a26d06610aed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["191e955ae10ba6b89b9e087656a4e632cbdf616d6378a506f0d6a26d06610aed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d777209872a196c48fdbfea433784cb3ab6a08fff701c2dc22e1696aac0c258"} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"191e955ae10ba6b89b9e087656a4e632cbdf616d6378a506f0d6a26d06610aed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea43713390ba15e83d1e5bf405ad05a3cb807a1cd2f0ea72d1bcac36a111b62d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea43713390ba15e83d1e5bf405ad05a3cb807a1cd2f0ea72d1bcac36a111b62d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7d777209872a196c48fdbfea433784cb3ab6a08fff701c2dc22e1696aac0c258","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7d777209872a196c48fdbfea433784cb3ab6a08fff701c2dc22e1696aac0c258"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea43713390ba15e83d1e5bf405ad05a3cb807a1cd2f0ea72d1bcac36a111b62d"} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7d777209872a196c48fdbfea433784cb3ab6a08fff701c2dc22e1696aac0c258","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"191e955ae10ba6b89b9e087656a4e632cbdf616d6378a506f0d6a26d06610aed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"191e955ae10ba6b89b9e087656a4e632cbdf616d6378a506f0d6a26d06610aed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea43713390ba15e83d1e5bf405ad05a3cb807a1cd2f0ea72d1bcac36a111b62d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea43713390ba15e83d1e5bf405ad05a3cb807a1cd2f0ea72d1bcac36a111b62d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea43713390ba15e83d1e5bf405ad05a3cb807a1cd2f0ea72d1bcac36a111b62d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7d777209872a196c48fdbfea433784cb3ab6a08fff701c2dc22e1696aac0c258","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0fc498b526b858ed7bda0c7dccbf7d12ae696e94da6d5e82a0ca7e90b643efd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/191e955ae10ba6b89b9e087656a4e632cbdf616d6378a506f0d6a26d06610aed"} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0fc498b526b858ed7bda0c7dccbf7d12ae696e94da6d5e82a0ca7e90b643efd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"191e955ae10ba6b89b9e087656a4e632cbdf616d6378a506f0d6a26d06610aed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["191e955ae10ba6b89b9e087656a4e632cbdf616d6378a506f0d6a26d06610aed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"191e955ae10ba6b89b9e087656a4e632cbdf616d6378a506f0d6a26d06610aed","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea43713390ba15e83d1e5bf405ad05a3cb807a1cd2f0ea72d1bcac36a111b62d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0fc498b526b858ed7bda0c7dccbf7d12ae696e94da6d5e82a0ca7e90b643efd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"191e955ae10ba6b89b9e087656a4e632cbdf616d6378a506f0d6a26d06610aed","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7d777209872a196c48fdbfea433784cb3ab6a08fff701c2dc22e1696aac0c258"} {"level":"debug","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0fc498b526b858ed7bda0c7dccbf7d12ae696e94da6d5e82a0ca7e90b643efd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0fc498b526b858ed7bda0c7dccbf7d12ae696e94da6d5e82a0ca7e90b643efd","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea43713390ba15e83d1e5bf405ad05a3cb807a1cd2f0ea72d1bcac36a111b62d"} {"level":"debug","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd3053b1d18b13880c1586c1c85cb77e0e060642e0dd7fbc6e986cb5aa70d471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd3053b1d18b13880c1586c1c85cb77e0e060642e0dd7fbc6e986cb5aa70d471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd3053b1d18b13880c1586c1c85cb77e0e060642e0dd7fbc6e986cb5aa70d471","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0fc498b526b858ed7bda0c7dccbf7d12ae696e94da6d5e82a0ca7e90b643efd"} {"level":"debug","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd3053b1d18b13880c1586c1c85cb77e0e060642e0dd7fbc6e986cb5aa70d471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f0fc498b526b858ed7bda0c7dccbf7d12ae696e94da6d5e82a0ca7e90b643efd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f0fc498b526b858ed7bda0c7dccbf7d12ae696e94da6d5e82a0ca7e90b643efd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f0fc498b526b858ed7bda0c7dccbf7d12ae696e94da6d5e82a0ca7e90b643efd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f0fc498b526b858ed7bda0c7dccbf7d12ae696e94da6d5e82a0ca7e90b643efd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd3053b1d18b13880c1586c1c85cb77e0e060642e0dd7fbc6e986cb5aa70d471","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/191e955ae10ba6b89b9e087656a4e632cbdf616d6378a506f0d6a26d06610aed"} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd3053b1d18b13880c1586c1c85cb77e0e060642e0dd7fbc6e986cb5aa70d471"} {"level":"debug","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd3053b1d18b13880c1586c1c85cb77e0e060642e0dd7fbc6e986cb5aa70d471","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd3053b1d18b13880c1586c1c85cb77e0e060642e0dd7fbc6e986cb5aa70d471"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd3053b1d18b13880c1586c1c85cb77e0e060642e0dd7fbc6e986cb5aa70d471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8566544751d451d6562df1499b985efb50b4220a986a2712dde6f4bd1a27898a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8566544751d451d6562df1499b985efb50b4220a986a2712dde6f4bd1a27898a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c2ce3c04cca05a440d30c1000fafd89d41c12cfafd9c0fe53e35d513d976dc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f0fc498b526b858ed7bda0c7dccbf7d12ae696e94da6d5e82a0ca7e90b643efd"} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c2ce3c04cca05a440d30c1000fafd89d41c12cfafd9c0fe53e35d513d976dc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd3053b1d18b13880c1586c1c85cb77e0e060642e0dd7fbc6e986cb5aa70d471","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69830b596606ab5bdce8b430a5c4b2cacc0abc7950fa8ce038a7816dbae27c96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69830b596606ab5bdce8b430a5c4b2cacc0abc7950fa8ce038a7816dbae27c96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8566544751d451d6562df1499b985efb50b4220a986a2712dde6f4bd1a27898a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8566544751d451d6562df1499b985efb50b4220a986a2712dde6f4bd1a27898a"} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8566544751d451d6562df1499b985efb50b4220a986a2712dde6f4bd1a27898a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c2ce3c04cca05a440d30c1000fafd89d41c12cfafd9c0fe53e35d513d976dc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c2ce3c04cca05a440d30c1000fafd89d41c12cfafd9c0fe53e35d513d976dc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69830b596606ab5bdce8b430a5c4b2cacc0abc7950fa8ce038a7816dbae27c96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8566544751d451d6562df1499b985efb50b4220a986a2712dde6f4bd1a27898a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8566544751d451d6562df1499b985efb50b4220a986a2712dde6f4bd1a27898a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c2ce3c04cca05a440d30c1000fafd89d41c12cfafd9c0fe53e35d513d976dc7"} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8566544751d451d6562df1499b985efb50b4220a986a2712dde6f4bd1a27898a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c2ce3c04cca05a440d30c1000fafd89d41c12cfafd9c0fe53e35d513d976dc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c2ce3c04cca05a440d30c1000fafd89d41c12cfafd9c0fe53e35d513d976dc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd3053b1d18b13880c1586c1c85cb77e0e060642e0dd7fbc6e986cb5aa70d471"} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c2ce3c04cca05a440d30c1000fafd89d41c12cfafd9c0fe53e35d513d976dc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69830b596606ab5bdce8b430a5c4b2cacc0abc7950fa8ce038a7816dbae27c96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69830b596606ab5bdce8b430a5c4b2cacc0abc7950fa8ce038a7816dbae27c96"} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69830b596606ab5bdce8b430a5c4b2cacc0abc7950fa8ce038a7816dbae27c96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8566544751d451d6562df1499b985efb50b4220a986a2712dde6f4bd1a27898a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8566544751d451d6562df1499b985efb50b4220a986a2712dde6f4bd1a27898a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c2ce3c04cca05a440d30c1000fafd89d41c12cfafd9c0fe53e35d513d976dc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69830b596606ab5bdce8b430a5c4b2cacc0abc7950fa8ce038a7816dbae27c96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69830b596606ab5bdce8b430a5c4b2cacc0abc7950fa8ce038a7816dbae27c96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8566544751d451d6562df1499b985efb50b4220a986a2712dde6f4bd1a27898a"} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69830b596606ab5bdce8b430a5c4b2cacc0abc7950fa8ce038a7816dbae27c96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8566544751d451d6562df1499b985efb50b4220a986a2712dde6f4bd1a27898a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:59:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8566544751d451d6562df1499b985efb50b4220a986a2712dde6f4bd1a27898a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8566544751d451d6562df1499b985efb50b4220a986a2712dde6f4bd1a27898a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69830b596606ab5bdce8b430a5c4b2cacc0abc7950fa8ce038a7816dbae27c96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8566544751d451d6562df1499b985efb50b4220a986a2712dde6f4bd1a27898a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c2ce3c04cca05a440d30c1000fafd89d41c12cfafd9c0fe53e35d513d976dc7"} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69830b596606ab5bdce8b430a5c4b2cacc0abc7950fa8ce038a7816dbae27c96"} {"level":"info","ts":"2026-07-10T21:59:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8566544751d451d6562df1499b985efb50b4220a986a2712dde6f4bd1a27898a"} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985"} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985"} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985"} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985"} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985"} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13"} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985"} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13"} {"level":"error","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985"} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13"} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985"} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13"} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5eff6abba62a2aac4ee87f369717d9d60927372b9009ef4022eaf9b8c58b10ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985"} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5eff6abba62a2aac4ee87f369717d9d60927372b9009ef4022eaf9b8c58b10ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13"} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5eff6abba62a2aac4ee87f369717d9d60927372b9009ef4022eaf9b8c58b10ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5eff6abba62a2aac4ee87f369717d9d60927372b9009ef4022eaf9b8c58b10ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5eff6abba62a2aac4ee87f369717d9d60927372b9009ef4022eaf9b8c58b10ac"} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5eff6abba62a2aac4ee87f369717d9d60927372b9009ef4022eaf9b8c58b10ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5eff6abba62a2aac4ee87f369717d9d60927372b9009ef4022eaf9b8c58b10ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5eff6abba62a2aac4ee87f369717d9d60927372b9009ef4022eaf9b8c58b10ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13"} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5eff6abba62a2aac4ee87f369717d9d60927372b9009ef4022eaf9b8c58b10ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5eff6abba62a2aac4ee87f369717d9d60927372b9009ef4022eaf9b8c58b10ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5eff6abba62a2aac4ee87f369717d9d60927372b9009ef4022eaf9b8c58b10ac"} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5eff6abba62a2aac4ee87f369717d9d60927372b9009ef4022eaf9b8c58b10ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5eff6abba62a2aac4ee87f369717d9d60927372b9009ef4022eaf9b8c58b10ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5eff6abba62a2aac4ee87f369717d9d60927372b9009ef4022eaf9b8c58b10ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13"} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5eff6abba62a2aac4ee87f369717d9d60927372b9009ef4022eaf9b8c58b10ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5eff6abba62a2aac4ee87f369717d9d60927372b9009ef4022eaf9b8c58b10ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5eff6abba62a2aac4ee87f369717d9d60927372b9009ef4022eaf9b8c58b10ac"} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5eff6abba62a2aac4ee87f369717d9d60927372b9009ef4022eaf9b8c58b10ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5eff6abba62a2aac4ee87f369717d9d60927372b9009ef4022eaf9b8c58b10ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5eff6abba62a2aac4ee87f369717d9d60927372b9009ef4022eaf9b8c58b10ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13"} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b3a472a4ae5f88ab5366ad0360406e5422f7a8fe4e265766c1b81cd2169fd98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b3a472a4ae5f88ab5366ad0360406e5422f7a8fe4e265766c1b81cd2169fd98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5eff6abba62a2aac4ee87f369717d9d60927372b9009ef4022eaf9b8c58b10ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5eff6abba62a2aac4ee87f369717d9d60927372b9009ef4022eaf9b8c58b10ac"} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5eff6abba62a2aac4ee87f369717d9d60927372b9009ef4022eaf9b8c58b10ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b3a472a4ae5f88ab5366ad0360406e5422f7a8fe4e265766c1b81cd2169fd98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b3a472a4ae5f88ab5366ad0360406e5422f7a8fe4e265766c1b81cd2169fd98"} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b3a472a4ae5f88ab5366ad0360406e5422f7a8fe4e265766c1b81cd2169fd98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5eff6abba62a2aac4ee87f369717d9d60927372b9009ef4022eaf9b8c58b10ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5eff6abba62a2aac4ee87f369717d9d60927372b9009ef4022eaf9b8c58b10ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13"} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5eff6abba62a2aac4ee87f369717d9d60927372b9009ef4022eaf9b8c58b10ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b3a472a4ae5f88ab5366ad0360406e5422f7a8fe4e265766c1b81cd2169fd98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b3a472a4ae5f88ab5366ad0360406e5422f7a8fe4e265766c1b81cd2169fd98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b3a472a4ae5f88ab5366ad0360406e5422f7a8fe4e265766c1b81cd2169fd98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5eff6abba62a2aac4ee87f369717d9d60927372b9009ef4022eaf9b8c58b10ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:59:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5eff6abba62a2aac4ee87f369717d9d60927372b9009ef4022eaf9b8c58b10ac"} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5eff6abba62a2aac4ee87f369717d9d60927372b9009ef4022eaf9b8c58b10ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b3a472a4ae5f88ab5366ad0360406e5422f7a8fe4e265766c1b81cd2169fd98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:59:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:59:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b3a472a4ae5f88ab5366ad0360406e5422f7a8fe4e265766c1b81cd2169fd98"} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b3a472a4ae5f88ab5366ad0360406e5422f7a8fe4e265766c1b81cd2169fd98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5eff6abba62a2aac4ee87f369717d9d60927372b9009ef4022eaf9b8c58b10ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7b3a472a4ae5f88ab5366ad0360406e5422f7a8fe4e265766c1b81cd2169fd98","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:59:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:59:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7b3a472a4ae5f88ab5366ad0360406e5422f7a8fe4e265766c1b81cd2169fd98"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7b3a472a4ae5f88ab5366ad0360406e5422f7a8fe4e265766c1b81cd2169fd98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5eff6abba62a2aac4ee87f369717d9d60927372b9009ef4022eaf9b8c58b10ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7b3a472a4ae5f88ab5366ad0360406e5422f7a8fe4e265766c1b81cd2169fd98","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0b28b0ad46e92bdd947dd67857489d2054e3ca8d4d6cbfded28a5994d241ec2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:59:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:59:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0b28b0ad46e92bdd947dd67857489d2054e3ca8d4d6cbfded28a5994d241ec2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5eff6abba62a2aac4ee87f369717d9d60927372b9009ef4022eaf9b8c58b10ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0b28b0ad46e92bdd947dd67857489d2054e3ca8d4d6cbfded28a5994d241ec2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0b28b0ad46e92bdd947dd67857489d2054e3ca8d4d6cbfded28a5994d241ec2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5eff6abba62a2aac4ee87f369717d9d60927372b9009ef4022eaf9b8c58b10ac"} {"level":"debug","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0b28b0ad46e92bdd947dd67857489d2054e3ca8d4d6cbfded28a5994d241ec2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5eff6abba62a2aac4ee87f369717d9d60927372b9009ef4022eaf9b8c58b10ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:59:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:59:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5eff6abba62a2aac4ee87f369717d9d60927372b9009ef4022eaf9b8c58b10ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7b3a472a4ae5f88ab5366ad0360406e5422f7a8fe4e265766c1b81cd2169fd98"} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5eff6abba62a2aac4ee87f369717d9d60927372b9009ef4022eaf9b8c58b10ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5eff6abba62a2aac4ee87f369717d9d60927372b9009ef4022eaf9b8c58b10ac","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0b28b0ad46e92bdd947dd67857489d2054e3ca8d4d6cbfded28a5994d241ec2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:59:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:59:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0b28b0ad46e92bdd947dd67857489d2054e3ca8d4d6cbfded28a5994d241ec2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cf15b8af555d6bf30162ba84362b38e75fa80217b8f39ee0d5c2ba6a1fa06f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:59:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:59:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0b28b0ad46e92bdd947dd67857489d2054e3ca8d4d6cbfded28a5994d241ec2"} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cf15b8af555d6bf30162ba84362b38e75fa80217b8f39ee0d5c2ba6a1fa06f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0b28b0ad46e92bdd947dd67857489d2054e3ca8d4d6cbfded28a5994d241ec2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:59:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:59:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0b28b0ad46e92bdd947dd67857489d2054e3ca8d4d6cbfded28a5994d241ec2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5eff6abba62a2aac4ee87f369717d9d60927372b9009ef4022eaf9b8c58b10ac"} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0b28b0ad46e92bdd947dd67857489d2054e3ca8d4d6cbfded28a5994d241ec2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cf15b8af555d6bf30162ba84362b38e75fa80217b8f39ee0d5c2ba6a1fa06f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:59:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:59:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cf15b8af555d6bf30162ba84362b38e75fa80217b8f39ee0d5c2ba6a1fa06f0"} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cf15b8af555d6bf30162ba84362b38e75fa80217b8f39ee0d5c2ba6a1fa06f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0b28b0ad46e92bdd947dd67857489d2054e3ca8d4d6cbfded28a5994d241ec2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:59:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:59:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0b28b0ad46e92bdd947dd67857489d2054e3ca8d4d6cbfded28a5994d241ec2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cf15b8af555d6bf30162ba84362b38e75fa80217b8f39ee0d5c2ba6a1fa06f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:59:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:59:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cf15b8af555d6bf30162ba84362b38e75fa80217b8f39ee0d5c2ba6a1fa06f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0b28b0ad46e92bdd947dd67857489d2054e3ca8d4d6cbfded28a5994d241ec2"} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cf15b8af555d6bf30162ba84362b38e75fa80217b8f39ee0d5c2ba6a1fa06f0"} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cf15b8af555d6bf30162ba84362b38e75fa80217b8f39ee0d5c2ba6a1fa06f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0b28b0ad46e92bdd947dd67857489d2054e3ca8d4d6cbfded28a5994d241ec2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f62ce248d95bd7c7ef9219d7c6d3a75c1bb879b8e223f788ab259934a594c5ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:59:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:59:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0b28b0ad46e92bdd947dd67857489d2054e3ca8d4d6cbfded28a5994d241ec2"} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f62ce248d95bd7c7ef9219d7c6d3a75c1bb879b8e223f788ab259934a594c5ad"} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f62ce248d95bd7c7ef9219d7c6d3a75c1bb879b8e223f788ab259934a594c5ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cf15b8af555d6bf30162ba84362b38e75fa80217b8f39ee0d5c2ba6a1fa06f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:59:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:59:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cf15b8af555d6bf30162ba84362b38e75fa80217b8f39ee0d5c2ba6a1fa06f0"} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f62ce248d95bd7c7ef9219d7c6d3a75c1bb879b8e223f788ab259934a594c5ad"} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cf15b8af555d6bf30162ba84362b38e75fa80217b8f39ee0d5c2ba6a1fa06f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0b28b0ad46e92bdd947dd67857489d2054e3ca8d4d6cbfded28a5994d241ec2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:59:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:59:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0b28b0ad46e92bdd947dd67857489d2054e3ca8d4d6cbfded28a5994d241ec2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cf15b8af555d6bf30162ba84362b38e75fa80217b8f39ee0d5c2ba6a1fa06f0"} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dbc4ac10b05904d4680f7ccc18095523d399e2578ef0088ca4696ac82e4920a"} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0b28b0ad46e92bdd947dd67857489d2054e3ca8d4d6cbfded28a5994d241ec2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f62ce248d95bd7c7ef9219d7c6d3a75c1bb879b8e223f788ab259934a594c5ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:59:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:59:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f62ce248d95bd7c7ef9219d7c6d3a75c1bb879b8e223f788ab259934a594c5ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0b28b0ad46e92bdd947dd67857489d2054e3ca8d4d6cbfded28a5994d241ec2"} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f62ce248d95bd7c7ef9219d7c6d3a75c1bb879b8e223f788ab259934a594c5ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8cf15b8af555d6bf30162ba84362b38e75fa80217b8f39ee0d5c2ba6a1fa06f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:59:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:59:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8cf15b8af555d6bf30162ba84362b38e75fa80217b8f39ee0d5c2ba6a1fa06f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6256c5e1e895a25e7e9f83a6e3dbf93d69a84ab6551d349b6f82ab111908559"} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f62ce248d95bd7c7ef9219d7c6d3a75c1bb879b8e223f788ab259934a594c5ad"} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8cf15b8af555d6bf30162ba84362b38e75fa80217b8f39ee0d5c2ba6a1fa06f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3dbc4ac10b05904d4680f7ccc18095523d399e2578ef0088ca4696ac82e4920a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:59:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:59:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3dbc4ac10b05904d4680f7ccc18095523d399e2578ef0088ca4696ac82e4920a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cf15b8af555d6bf30162ba84362b38e75fa80217b8f39ee0d5c2ba6a1fa06f0"} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3dbc4ac10b05904d4680f7ccc18095523d399e2578ef0088ca4696ac82e4920a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0b28b0ad46e92bdd947dd67857489d2054e3ca8d4d6cbfded28a5994d241ec2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6256c5e1e895a25e7e9f83a6e3dbf93d69a84ab6551d349b6f82ab111908559","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:59:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:59:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6256c5e1e895a25e7e9f83a6e3dbf93d69a84ab6551d349b6f82ab111908559"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/942dcf4d3278a90169ec8e27fddc5a9e327ffc605773b84bd78e7e037ce691b5"} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3dbc4ac10b05904d4680f7ccc18095523d399e2578ef0088ca4696ac82e4920a"} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6256c5e1e895a25e7e9f83a6e3dbf93d69a84ab6551d349b6f82ab111908559","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f62ce248d95bd7c7ef9219d7c6d3a75c1bb879b8e223f788ab259934a594c5ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cf15b8af555d6bf30162ba84362b38e75fa80217b8f39ee0d5c2ba6a1fa06f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"942dcf4d3278a90169ec8e27fddc5a9e327ffc605773b84bd78e7e037ce691b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:59:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:59:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["942dcf4d3278a90169ec8e27fddc5a9e327ffc605773b84bd78e7e037ce691b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f92327560fbb6b041809a439f337fe3c4618adf05e786796fae9dc2363b6996"} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6256c5e1e895a25e7e9f83a6e3dbf93d69a84ab6551d349b6f82ab111908559"} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"942dcf4d3278a90169ec8e27fddc5a9e327ffc605773b84bd78e7e037ce691b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3dbc4ac10b05904d4680f7ccc18095523d399e2578ef0088ca4696ac82e4920a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f92327560fbb6b041809a439f337fe3c4618adf05e786796fae9dc2363b6996","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:59:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:59:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f92327560fbb6b041809a439f337fe3c4618adf05e786796fae9dc2363b6996"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ee6ccd193f7699d3d2ac575d1fc0bc0af1de9d76c954edd7379fef966bdf49b"} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/942dcf4d3278a90169ec8e27fddc5a9e327ffc605773b84bd78e7e037ce691b5"} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f92327560fbb6b041809a439f337fe3c4618adf05e786796fae9dc2363b6996","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6256c5e1e895a25e7e9f83a6e3dbf93d69a84ab6551d349b6f82ab111908559","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ee6ccd193f7699d3d2ac575d1fc0bc0af1de9d76c954edd7379fef966bdf49b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:59:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:59:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ee6ccd193f7699d3d2ac575d1fc0bc0af1de9d76c954edd7379fef966bdf49b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f92327560fbb6b041809a439f337fe3c4618adf05e786796fae9dc2363b6996"} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ee6ccd193f7699d3d2ac575d1fc0bc0af1de9d76c954edd7379fef966bdf49b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"942dcf4d3278a90169ec8e27fddc5a9e327ffc605773b84bd78e7e037ce691b5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f92327560fbb6b041809a439f337fe3c4618adf05e786796fae9dc2363b6996","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ee6ccd193f7699d3d2ac575d1fc0bc0af1de9d76c954edd7379fef966bdf49b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T21:59:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T21:59:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ee6ccd193f7699d3d2ac575d1fc0bc0af1de9d76c954edd7379fef966bdf49b"} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ee6ccd193f7699d3d2ac575d1fc0bc0af1de9d76c954edd7379fef966bdf49b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ee6ccd193f7699d3d2ac575d1fc0bc0af1de9d76c954edd7379fef966bdf49b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ee6ccd193f7699d3d2ac575d1fc0bc0af1de9d76c954edd7379fef966bdf49b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ee6ccd193f7699d3d2ac575d1fc0bc0af1de9d76c954edd7379fef966bdf49b"} {"level":"debug","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ee6ccd193f7699d3d2ac575d1fc0bc0af1de9d76c954edd7379fef966bdf49b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T21:59:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T21:59:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ee6ccd193f7699d3d2ac575d1fc0bc0af1de9d76c954edd7379fef966bdf49b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ee6ccd193f7699d3d2ac575d1fc0bc0af1de9d76c954edd7379fef966bdf49b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ee6ccd193f7699d3d2ac575d1fc0bc0af1de9d76c954edd7379fef966bdf49b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T21:59:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ee6ccd193f7699d3d2ac575d1fc0bc0af1de9d76c954edd7379fef966bdf49b"} {"level":"info","ts":"2026-07-10T21:59:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f88947a8-43ba-414a-b44d-c61c1067061d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:43090","PortSpecifier":{"PortValue":43090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f88947a8-43ba-414a-b44d-c61c1067061d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:59:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f88947a8-43ba-414a-b44d-c61c1067061d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:43090","PortSpecifier":{"PortValue":43090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783720770,"nanos":864900822},"http":{"id":"f88947a8-43ba-414a-b44d-c61c1067061d","method":"POST","headers":{":authority":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:59:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f88947a8-43ba-414a-b44d-c61c1067061d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T21:59:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f88947a8-43ba-414a-b44d-c61c1067061d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"]}} {"level":"debug","ts":"2026-07-10T21:59:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f88947a8-43ba-414a-b44d-c61c1067061d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4e453737804b21837c343736e1d1641468db9507ae64fabac5d82ca79ddf2f34"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:59:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f88947a8-43ba-414a-b44d-c61c1067061d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:59:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f88947a8-43ba-414a-b44d-c61c1067061d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:59:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f88947a8-43ba-414a-b44d-c61c1067061d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-22d37c/auth-test-model-22d37c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:59:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f88947a8-43ba-414a-b44d-c61c1067061d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T21:59:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f88947a8-43ba-414a-b44d-c61c1067061d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T21:59:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f88947a8-43ba-414a-b44d-c61c1067061d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T21:59:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f88947a8-43ba-414a-b44d-c61c1067061d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:59:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f88947a8-43ba-414a-b44d-c61c1067061d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:59:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c493588c-2a43-4e84-bb75-e21cff5bfa73","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:55322","PortSpecifier":{"PortValue":55322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c493588c-2a43-4e84-bb75-e21cff5bfa73","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:59:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c493588c-2a43-4e84-bb75-e21cff5bfa73","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:55322","PortSpecifier":{"PortValue":55322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783720770,"nanos":931336148},"http":{"id":"c493588c-2a43-4e84-bb75-e21cff5bfa73","method":"POST","headers":{":authority":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:59:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c493588c-2a43-4e84-bb75-e21cff5bfa73","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T21:59:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c493588c-2a43-4e84-bb75-e21cff5bfa73","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"]}} {"level":"debug","ts":"2026-07-10T21:59:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c493588c-2a43-4e84-bb75-e21cff5bfa73","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4ee6ccd193f7699d3d2ac575d1fc0bc0af1de9d76c954edd7379fef966bdf49b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:59:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c493588c-2a43-4e84-bb75-e21cff5bfa73","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:59:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c493588c-2a43-4e84-bb75-e21cff5bfa73","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:59:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c493588c-2a43-4e84-bb75-e21cff5bfa73","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f937a7/auth-test-model-f937a7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:59:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c493588c-2a43-4e84-bb75-e21cff5bfa73","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T21:59:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c493588c-2a43-4e84-bb75-e21cff5bfa73","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T21:59:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c493588c-2a43-4e84-bb75-e21cff5bfa73","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T21:59:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c493588c-2a43-4e84-bb75-e21cff5bfa73","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:59:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c493588c-2a43-4e84-bb75-e21cff5bfa73","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:59:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8838081-3636-4ff9-b7fa-bd49ab8bb5a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:43102","PortSpecifier":{"PortValue":43102}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c8838081-3636-4ff9-b7fa-bd49ab8bb5a4","method":"GET","path":"/maas-api/v1/api-keys/f851dba5-38e6-4608-90e3-29a87c88de71","host":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:59:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c8838081-3636-4ff9-b7fa-bd49ab8bb5a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:43102","PortSpecifier":{"PortValue":43102}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783720770,"nanos":993876096},"http":{"id":"c8838081-3636-4ff9-b7fa-bd49ab8bb5a4","method":"GET","headers":{":authority":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f851dba5-38e6-4608-90e3-29a87c88de71",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:59:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c8838081-3636-4ff9-b7fa-bd49ab8bb5a4","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T21:59:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c8838081-3636-4ff9-b7fa-bd49ab8bb5a4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"]}} {"level":"debug","ts":"2026-07-10T21:59:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c8838081-3636-4ff9-b7fa-bd49ab8bb5a4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4e453737804b21837c343736e1d1641468db9507ae64fabac5d82ca79ddf2f34"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f851dba5-38e6-4608-90e3-29a87c88de71",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:59:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8838081-3636-4ff9-b7fa-bd49ab8bb5a4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:59:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8838081-3636-4ff9-b7fa-bd49ab8bb5a4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:59:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c8838081-3636-4ff9-b7fa-bd49ab8bb5a4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-22d37c/auth-test-model-22d37c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:59:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c8838081-3636-4ff9-b7fa-bd49ab8bb5a4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T21:59:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8838081-3636-4ff9-b7fa-bd49ab8bb5a4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T21:59:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c8838081-3636-4ff9-b7fa-bd49ab8bb5a4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T21:59:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8838081-3636-4ff9-b7fa-bd49ab8bb5a4","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:59:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c8838081-3636-4ff9-b7fa-bd49ab8bb5a4","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:59:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f23d99f9-4543-431e-a939-28bcda35f3c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:55324","PortSpecifier":{"PortValue":55324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f23d99f9-4543-431e-a939-28bcda35f3c0","method":"GET","path":"/maas-api/v1/api-keys/a8f92b77-1d0f-431d-8c7f-98d597450d9d","host":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:59:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f23d99f9-4543-431e-a939-28bcda35f3c0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:55324","PortSpecifier":{"PortValue":55324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783720771,"nanos":33465667},"http":{"id":"f23d99f9-4543-431e-a939-28bcda35f3c0","method":"GET","headers":{":authority":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a8f92b77-1d0f-431d-8c7f-98d597450d9d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:59:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f23d99f9-4543-431e-a939-28bcda35f3c0","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T21:59:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f23d99f9-4543-431e-a939-28bcda35f3c0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"]}} {"level":"debug","ts":"2026-07-10T21:59:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f23d99f9-4543-431e-a939-28bcda35f3c0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4ee6ccd193f7699d3d2ac575d1fc0bc0af1de9d76c954edd7379fef966bdf49b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a8f92b77-1d0f-431d-8c7f-98d597450d9d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:59:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f23d99f9-4543-431e-a939-28bcda35f3c0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:59:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f23d99f9-4543-431e-a939-28bcda35f3c0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:59:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f23d99f9-4543-431e-a939-28bcda35f3c0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f937a7/auth-test-model-f937a7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:59:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f23d99f9-4543-431e-a939-28bcda35f3c0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T21:59:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f23d99f9-4543-431e-a939-28bcda35f3c0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T21:59:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f23d99f9-4543-431e-a939-28bcda35f3c0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T21:59:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f23d99f9-4543-431e-a939-28bcda35f3c0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:59:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f23d99f9-4543-431e-a939-28bcda35f3c0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:59:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ac54785-ca91-4df7-bdd8-b14b862baa04","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:38354","PortSpecifier":{"PortValue":38354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4ac54785-ca91-4df7-bdd8-b14b862baa04","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:59:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4ac54785-ca91-4df7-bdd8-b14b862baa04","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:38354","PortSpecifier":{"PortValue":38354}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783720790,"nanos":327635236},"http":{"id":"4ac54785-ca91-4df7-bdd8-b14b862baa04","method":"POST","headers":{":authority":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:59:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4ac54785-ca91-4df7-bdd8-b14b862baa04","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T21:59:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4ac54785-ca91-4df7-bdd8-b14b862baa04","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"]}} {"level":"debug","ts":"2026-07-10T21:59:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4ac54785-ca91-4df7-bdd8-b14b862baa04","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4e453737804b21837c343736e1d1641468db9507ae64fabac5d82ca79ddf2f34"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:59:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ac54785-ca91-4df7-bdd8-b14b862baa04","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:59:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ac54785-ca91-4df7-bdd8-b14b862baa04","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:59:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4ac54785-ca91-4df7-bdd8-b14b862baa04","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-22d37c/auth-test-model-22d37c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:59:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4ac54785-ca91-4df7-bdd8-b14b862baa04","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T21:59:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ac54785-ca91-4df7-bdd8-b14b862baa04","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T21:59:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4ac54785-ca91-4df7-bdd8-b14b862baa04","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T21:59:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ac54785-ca91-4df7-bdd8-b14b862baa04","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:59:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4ac54785-ca91-4df7-bdd8-b14b862baa04","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:59:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21e0221c-ede5-4d03-ba13-c4635ead912c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:59334","PortSpecifier":{"PortValue":59334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"21e0221c-ede5-4d03-ba13-c4635ead912c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:59:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21e0221c-ede5-4d03-ba13-c4635ead912c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:59334","PortSpecifier":{"PortValue":59334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783720790,"nanos":370096806},"http":{"id":"21e0221c-ede5-4d03-ba13-c4635ead912c","method":"POST","headers":{":authority":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:59:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"21e0221c-ede5-4d03-ba13-c4635ead912c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T21:59:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"21e0221c-ede5-4d03-ba13-c4635ead912c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"]}} {"level":"debug","ts":"2026-07-10T21:59:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"21e0221c-ede5-4d03-ba13-c4635ead912c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4ee6ccd193f7699d3d2ac575d1fc0bc0af1de9d76c954edd7379fef966bdf49b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:59:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21e0221c-ede5-4d03-ba13-c4635ead912c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:59:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21e0221c-ede5-4d03-ba13-c4635ead912c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:59:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21e0221c-ede5-4d03-ba13-c4635ead912c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f937a7/auth-test-model-f937a7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:59:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"21e0221c-ede5-4d03-ba13-c4635ead912c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T21:59:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21e0221c-ede5-4d03-ba13-c4635ead912c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T21:59:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21e0221c-ede5-4d03-ba13-c4635ead912c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T21:59:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21e0221c-ede5-4d03-ba13-c4635ead912c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:59:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21e0221c-ede5-4d03-ba13-c4635ead912c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T21:59:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33ded5bd-3cc4-43d1-bb0e-c403062a5264","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:38356","PortSpecifier":{"PortValue":38356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"33ded5bd-3cc4-43d1-bb0e-c403062a5264","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T21:59:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33ded5bd-3cc4-43d1-bb0e-c403062a5264","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:38356","PortSpecifier":{"PortValue":38356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783720790,"nanos":409939641},"http":{"id":"33ded5bd-3cc4-43d1-bb0e-c403062a5264","method":"GET","headers":{":authority":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:59:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"33ded5bd-3cc4-43d1-bb0e-c403062a5264","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-riqKaXfqVfuQdIgu_ZWVUznJokLExm3FoeYow3RJQxeNT3Ir0zQb7eVy3QXS"} {"level":"debug","ts":"2026-07-10T21:59:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"33ded5bd-3cc4-43d1-bb0e-c403062a5264","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-22d37c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-riqKaXfqVfuQdIgu_ZWVUznJokLExm3FoeYow3RJQxeNT3Ir0zQb7eVy3QXS\"}"} {"level":"debug","ts":"2026-07-10T21:59:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"33ded5bd-3cc4-43d1-bb0e-c403062a5264","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-22d37c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d49dad65-c43c-4016-b5a4-a24ce7e15a9b","keyName":"e2e-auth-iso-a-f6b429","subscription":"e2e-auth-iso-0d8fed","tenant":"e2e-shared-a-22d37c","userId":"d49dad65-c43c-4016-b5a4-a24ce7e15a9b","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T21:59:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"33ded5bd-3cc4-43d1-bb0e-c403062a5264","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T21:59:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33ded5bd-3cc4-43d1-bb0e-c403062a5264","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:59:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33ded5bd-3cc4-43d1-bb0e-c403062a5264","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:59:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33ded5bd-3cc4-43d1-bb0e-c403062a5264","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-22d37c/auth-test-model-22d37c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T21:59:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33ded5bd-3cc4-43d1-bb0e-c403062a5264","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-0d8fed"} {"level":"debug","ts":"2026-07-10T21:59:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33ded5bd-3cc4-43d1-bb0e-c403062a5264","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T21:59:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33ded5bd-3cc4-43d1-bb0e-c403062a5264","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T21:59:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"33ded5bd-3cc4-43d1-bb0e-c403062a5264","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-10T21:59:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33ded5bd-3cc4-43d1-bb0e-c403062a5264","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T21:59:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33ded5bd-3cc4-43d1-bb0e-c403062a5264","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T22:00:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a99b5548-f59d-4d78-99bc-2cbfcce75801","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:33066","PortSpecifier":{"PortValue":33066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a99b5548-f59d-4d78-99bc-2cbfcce75801","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T22:00:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a99b5548-f59d-4d78-99bc-2cbfcce75801","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:33066","PortSpecifier":{"PortValue":33066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783720807,"nanos":672603660},"http":{"id":"a99b5548-f59d-4d78-99bc-2cbfcce75801","method":"POST","headers":{":authority":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:00:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a99b5548-f59d-4d78-99bc-2cbfcce75801","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T22:00:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a99b5548-f59d-4d78-99bc-2cbfcce75801","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"]}} {"level":"debug","ts":"2026-07-10T22:00:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a99b5548-f59d-4d78-99bc-2cbfcce75801","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4e453737804b21837c343736e1d1641468db9507ae64fabac5d82ca79ddf2f34"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:00:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a99b5548-f59d-4d78-99bc-2cbfcce75801","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:00:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a99b5548-f59d-4d78-99bc-2cbfcce75801","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:00:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a99b5548-f59d-4d78-99bc-2cbfcce75801","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-22d37c/auth-test-model-22d37c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:00:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a99b5548-f59d-4d78-99bc-2cbfcce75801","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T22:00:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a99b5548-f59d-4d78-99bc-2cbfcce75801","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T22:00:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a99b5548-f59d-4d78-99bc-2cbfcce75801","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T22:00:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a99b5548-f59d-4d78-99bc-2cbfcce75801","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T22:00:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a99b5548-f59d-4d78-99bc-2cbfcce75801","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T22:00:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a008217d-e306-4043-b5fb-fec6cbb1f99a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:40282","PortSpecifier":{"PortValue":40282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a008217d-e306-4043-b5fb-fec6cbb1f99a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T22:00:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a008217d-e306-4043-b5fb-fec6cbb1f99a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:40282","PortSpecifier":{"PortValue":40282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783720807,"nanos":717861862},"http":{"id":"a008217d-e306-4043-b5fb-fec6cbb1f99a","method":"POST","headers":{":authority":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:00:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a008217d-e306-4043-b5fb-fec6cbb1f99a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T22:00:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a008217d-e306-4043-b5fb-fec6cbb1f99a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"]}} {"level":"debug","ts":"2026-07-10T22:00:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a008217d-e306-4043-b5fb-fec6cbb1f99a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4ee6ccd193f7699d3d2ac575d1fc0bc0af1de9d76c954edd7379fef966bdf49b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:00:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a008217d-e306-4043-b5fb-fec6cbb1f99a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:00:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a008217d-e306-4043-b5fb-fec6cbb1f99a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:00:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a008217d-e306-4043-b5fb-fec6cbb1f99a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f937a7/auth-test-model-f937a7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:00:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a008217d-e306-4043-b5fb-fec6cbb1f99a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T22:00:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a008217d-e306-4043-b5fb-fec6cbb1f99a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T22:00:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a008217d-e306-4043-b5fb-fec6cbb1f99a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T22:00:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a008217d-e306-4043-b5fb-fec6cbb1f99a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T22:00:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a008217d-e306-4043-b5fb-fec6cbb1f99a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T22:00:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a177a1c-a706-4a0a-af27-d3047445d3bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:40284","PortSpecifier":{"PortValue":40284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2a177a1c-a706-4a0a-af27-d3047445d3bc","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T22:00:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2a177a1c-a706-4a0a-af27-d3047445d3bc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:40284","PortSpecifier":{"PortValue":40284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783720807,"nanos":754267037},"http":{"id":"2a177a1c-a706-4a0a-af27-d3047445d3bc","method":"GET","headers":{":authority":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:00:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2a177a1c-a706-4a0a-af27-d3047445d3bc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ITn8c6SqKlQ01M04_7q6GNmz4ChlB9NhL6Ny3hVTwt8gOTvWjw6XU2DSfScR"} {"level":"debug","ts":"2026-07-10T22:00:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2a177a1c-a706-4a0a-af27-d3047445d3bc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f937a7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ITn8c6SqKlQ01M04_7q6GNmz4ChlB9NhL6Ny3hVTwt8gOTvWjw6XU2DSfScR\"}"} {"level":"debug","ts":"2026-07-10T22:00:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2a177a1c-a706-4a0a-af27-d3047445d3bc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f937a7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-10T22:00:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2a177a1c-a706-4a0a-af27-d3047445d3bc","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"4ee6ccd193f7699d3d2ac575d1fc0bc0af1de9d76c954edd7379fef966bdf49b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:00:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2a177a1c-a706-4a0a-af27-d3047445d3bc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:00:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"2a177a1c-a706-4a0a-af27-d3047445d3bc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-10T22:00:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a177a1c-a706-4a0a-af27-d3047445d3bc","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-10T22:00:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2a177a1c-a706-4a0a-af27-d3047445d3bc","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"215ebd29-7ef7-407d-b5d6-8761b065dc8b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:47646","PortSpecifier":{"PortValue":47646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"215ebd29-7ef7-407d-b5d6-8761b065dc8b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"215ebd29-7ef7-407d-b5d6-8761b065dc8b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:47646","PortSpecifier":{"PortValue":47646}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783720827,"nanos":168228766},"http":{"id":"215ebd29-7ef7-407d-b5d6-8761b065dc8b","method":"POST","headers":{":authority":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"215ebd29-7ef7-407d-b5d6-8761b065dc8b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"215ebd29-7ef7-407d-b5d6-8761b065dc8b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"]}} {"level":"debug","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"215ebd29-7ef7-407d-b5d6-8761b065dc8b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4e453737804b21837c343736e1d1641468db9507ae64fabac5d82ca79ddf2f34"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"215ebd29-7ef7-407d-b5d6-8761b065dc8b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"215ebd29-7ef7-407d-b5d6-8761b065dc8b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"215ebd29-7ef7-407d-b5d6-8761b065dc8b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-22d37c/auth-test-model-22d37c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"215ebd29-7ef7-407d-b5d6-8761b065dc8b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"215ebd29-7ef7-407d-b5d6-8761b065dc8b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"215ebd29-7ef7-407d-b5d6-8761b065dc8b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"215ebd29-7ef7-407d-b5d6-8761b065dc8b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"215ebd29-7ef7-407d-b5d6-8761b065dc8b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bda96e97-1569-4949-8470-fb474db3aeaa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60220","PortSpecifier":{"PortValue":60220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bda96e97-1569-4949-8470-fb474db3aeaa","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bda96e97-1569-4949-8470-fb474db3aeaa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60220","PortSpecifier":{"PortValue":60220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783720827,"nanos":209052216},"http":{"id":"bda96e97-1569-4949-8470-fb474db3aeaa","method":"POST","headers":{":authority":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bda96e97-1569-4949-8470-fb474db3aeaa","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bda96e97-1569-4949-8470-fb474db3aeaa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"]}} {"level":"debug","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bda96e97-1569-4949-8470-fb474db3aeaa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4ee6ccd193f7699d3d2ac575d1fc0bc0af1de9d76c954edd7379fef966bdf49b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bda96e97-1569-4949-8470-fb474db3aeaa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bda96e97-1569-4949-8470-fb474db3aeaa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bda96e97-1569-4949-8470-fb474db3aeaa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f937a7/auth-test-model-f937a7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bda96e97-1569-4949-8470-fb474db3aeaa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bda96e97-1569-4949-8470-fb474db3aeaa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bda96e97-1569-4949-8470-fb474db3aeaa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bda96e97-1569-4949-8470-fb474db3aeaa","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bda96e97-1569-4949-8470-fb474db3aeaa","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a91be4f-54f9-457e-8477-ded4cf961bb3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:47662","PortSpecifier":{"PortValue":47662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5a91be4f-54f9-457e-8477-ded4cf961bb3","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a91be4f-54f9-457e-8477-ded4cf961bb3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:47662","PortSpecifier":{"PortValue":47662}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783720827,"nanos":246153689},"http":{"id":"5a91be4f-54f9-457e-8477-ded4cf961bb3","method":"POST","headers":{":authority":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5a91be4f-54f9-457e-8477-ded4cf961bb3","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5a91be4f-54f9-457e-8477-ded4cf961bb3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"]}} {"level":"debug","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5a91be4f-54f9-457e-8477-ded4cf961bb3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4e453737804b21837c343736e1d1641468db9507ae64fabac5d82ca79ddf2f34"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a91be4f-54f9-457e-8477-ded4cf961bb3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a91be4f-54f9-457e-8477-ded4cf961bb3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a91be4f-54f9-457e-8477-ded4cf961bb3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-22d37c/auth-test-model-22d37c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5a91be4f-54f9-457e-8477-ded4cf961bb3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a91be4f-54f9-457e-8477-ded4cf961bb3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a91be4f-54f9-457e-8477-ded4cf961bb3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a91be4f-54f9-457e-8477-ded4cf961bb3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a91be4f-54f9-457e-8477-ded4cf961bb3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a401822f-4e36-4b42-bbb7-e4d76bb1cd86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60230","PortSpecifier":{"PortValue":60230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a401822f-4e36-4b42-bbb7-e4d76bb1cd86","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a401822f-4e36-4b42-bbb7-e4d76bb1cd86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60230","PortSpecifier":{"PortValue":60230}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783720827,"nanos":296719633},"http":{"id":"a401822f-4e36-4b42-bbb7-e4d76bb1cd86","method":"POST","headers":{":authority":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a401822f-4e36-4b42-bbb7-e4d76bb1cd86","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a401822f-4e36-4b42-bbb7-e4d76bb1cd86","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"]}} {"level":"debug","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a401822f-4e36-4b42-bbb7-e4d76bb1cd86","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4ee6ccd193f7699d3d2ac575d1fc0bc0af1de9d76c954edd7379fef966bdf49b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a401822f-4e36-4b42-bbb7-e4d76bb1cd86","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a401822f-4e36-4b42-bbb7-e4d76bb1cd86","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a401822f-4e36-4b42-bbb7-e4d76bb1cd86","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f937a7/auth-test-model-f937a7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a401822f-4e36-4b42-bbb7-e4d76bb1cd86","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a401822f-4e36-4b42-bbb7-e4d76bb1cd86","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a401822f-4e36-4b42-bbb7-e4d76bb1cd86","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a401822f-4e36-4b42-bbb7-e4d76bb1cd86","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T22:00:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a401822f-4e36-4b42-bbb7-e4d76bb1cd86","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8fa4adf-6139-4007-b592-fd74c86316d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:52430","PortSpecifier":{"PortValue":52430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a8fa4adf-6139-4007-b592-fd74c86316d2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8fa4adf-6139-4007-b592-fd74c86316d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:52430","PortSpecifier":{"PortValue":52430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783720845,"nanos":670783631},"http":{"id":"a8fa4adf-6139-4007-b592-fd74c86316d2","method":"POST","headers":{":authority":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a8fa4adf-6139-4007-b592-fd74c86316d2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a8fa4adf-6139-4007-b592-fd74c86316d2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"]}} {"level":"debug","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a8fa4adf-6139-4007-b592-fd74c86316d2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4e453737804b21837c343736e1d1641468db9507ae64fabac5d82ca79ddf2f34"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8fa4adf-6139-4007-b592-fd74c86316d2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8fa4adf-6139-4007-b592-fd74c86316d2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8fa4adf-6139-4007-b592-fd74c86316d2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-22d37c/auth-test-model-22d37c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a8fa4adf-6139-4007-b592-fd74c86316d2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8fa4adf-6139-4007-b592-fd74c86316d2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a8fa4adf-6139-4007-b592-fd74c86316d2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8fa4adf-6139-4007-b592-fd74c86316d2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8fa4adf-6139-4007-b592-fd74c86316d2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea5bf44f-79de-4d76-815b-680511521f0a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:37164","PortSpecifier":{"PortValue":37164}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ea5bf44f-79de-4d76-815b-680511521f0a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ea5bf44f-79de-4d76-815b-680511521f0a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:37164","PortSpecifier":{"PortValue":37164}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783720845,"nanos":740159142},"http":{"id":"ea5bf44f-79de-4d76-815b-680511521f0a","method":"POST","headers":{":authority":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ea5bf44f-79de-4d76-815b-680511521f0a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ea5bf44f-79de-4d76-815b-680511521f0a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"]}} {"level":"debug","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ea5bf44f-79de-4d76-815b-680511521f0a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4ee6ccd193f7699d3d2ac575d1fc0bc0af1de9d76c954edd7379fef966bdf49b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea5bf44f-79de-4d76-815b-680511521f0a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea5bf44f-79de-4d76-815b-680511521f0a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ea5bf44f-79de-4d76-815b-680511521f0a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f937a7/auth-test-model-f937a7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ea5bf44f-79de-4d76-815b-680511521f0a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea5bf44f-79de-4d76-815b-680511521f0a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ea5bf44f-79de-4d76-815b-680511521f0a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea5bf44f-79de-4d76-815b-680511521f0a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ea5bf44f-79de-4d76-815b-680511521f0a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9530dd27-6d70-477a-a55b-686109ecaf5a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:37166","PortSpecifier":{"PortValue":37166}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9530dd27-6d70-477a-a55b-686109ecaf5a","method":"GET","path":"/maas-api/v1/api-keys/ec8a6813-c035-4d56-97f7-0bbf5bd76935","host":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9530dd27-6d70-477a-a55b-686109ecaf5a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:37166","PortSpecifier":{"PortValue":37166}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783720845,"nanos":776771909},"http":{"id":"9530dd27-6d70-477a-a55b-686109ecaf5a","method":"GET","headers":{":authority":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ec8a6813-c035-4d56-97f7-0bbf5bd76935",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9530dd27-6d70-477a-a55b-686109ecaf5a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9530dd27-6d70-477a-a55b-686109ecaf5a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"]}} {"level":"debug","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9530dd27-6d70-477a-a55b-686109ecaf5a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4ee6ccd193f7699d3d2ac575d1fc0bc0af1de9d76c954edd7379fef966bdf49b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ec8a6813-c035-4d56-97f7-0bbf5bd76935",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9530dd27-6d70-477a-a55b-686109ecaf5a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9530dd27-6d70-477a-a55b-686109ecaf5a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9530dd27-6d70-477a-a55b-686109ecaf5a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f937a7/auth-test-model-f937a7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9530dd27-6d70-477a-a55b-686109ecaf5a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9530dd27-6d70-477a-a55b-686109ecaf5a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9530dd27-6d70-477a-a55b-686109ecaf5a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9530dd27-6d70-477a-a55b-686109ecaf5a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9530dd27-6d70-477a-a55b-686109ecaf5a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00c6dbe5-010c-4dfc-8036-020b408ff76d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:52434","PortSpecifier":{"PortValue":52434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"00c6dbe5-010c-4dfc-8036-020b408ff76d","method":"GET","path":"/maas-api/v1/api-keys/ec8a6813-c035-4d56-97f7-0bbf5bd76935","host":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00c6dbe5-010c-4dfc-8036-020b408ff76d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:52434","PortSpecifier":{"PortValue":52434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783720845,"nanos":813120236},"http":{"id":"00c6dbe5-010c-4dfc-8036-020b408ff76d","method":"GET","headers":{":authority":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ec8a6813-c035-4d56-97f7-0bbf5bd76935",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"00c6dbe5-010c-4dfc-8036-020b408ff76d","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"00c6dbe5-010c-4dfc-8036-020b408ff76d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"]}} {"level":"debug","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"00c6dbe5-010c-4dfc-8036-020b408ff76d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4e453737804b21837c343736e1d1641468db9507ae64fabac5d82ca79ddf2f34"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/ec8a6813-c035-4d56-97f7-0bbf5bd76935",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00c6dbe5-010c-4dfc-8036-020b408ff76d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00c6dbe5-010c-4dfc-8036-020b408ff76d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00c6dbe5-010c-4dfc-8036-020b408ff76d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-22d37c/auth-test-model-22d37c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"00c6dbe5-010c-4dfc-8036-020b408ff76d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00c6dbe5-010c-4dfc-8036-020b408ff76d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00c6dbe5-010c-4dfc-8036-020b408ff76d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00c6dbe5-010c-4dfc-8036-020b408ff76d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T22:00:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00c6dbe5-010c-4dfc-8036-020b408ff76d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T22:01:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6828215b-3335-4a06-a750-e28ff24f6399","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:37022","PortSpecifier":{"PortValue":37022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6828215b-3335-4a06-a750-e28ff24f6399","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T22:01:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6828215b-3335-4a06-a750-e28ff24f6399","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:37022","PortSpecifier":{"PortValue":37022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783720865,"nanos":458373273},"http":{"id":"6828215b-3335-4a06-a750-e28ff24f6399","method":"POST","headers":{":authority":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:01:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6828215b-3335-4a06-a750-e28ff24f6399","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T22:01:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6828215b-3335-4a06-a750-e28ff24f6399","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"]}} {"level":"debug","ts":"2026-07-10T22:01:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6828215b-3335-4a06-a750-e28ff24f6399","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4e453737804b21837c343736e1d1641468db9507ae64fabac5d82ca79ddf2f34"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:01:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6828215b-3335-4a06-a750-e28ff24f6399","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:01:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6828215b-3335-4a06-a750-e28ff24f6399","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:01:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6828215b-3335-4a06-a750-e28ff24f6399","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-22d37c/auth-test-model-22d37c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:01:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6828215b-3335-4a06-a750-e28ff24f6399","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T22:01:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6828215b-3335-4a06-a750-e28ff24f6399","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T22:01:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6828215b-3335-4a06-a750-e28ff24f6399","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T22:01:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6828215b-3335-4a06-a750-e28ff24f6399","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T22:01:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6828215b-3335-4a06-a750-e28ff24f6399","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T22:01:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33c3e05c-f431-4e65-8dac-c599cce3b571","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:59846","PortSpecifier":{"PortValue":59846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"33c3e05c-f431-4e65-8dac-c599cce3b571","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T22:01:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33c3e05c-f431-4e65-8dac-c599cce3b571","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:59846","PortSpecifier":{"PortValue":59846}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783720865,"nanos":501466955},"http":{"id":"33c3e05c-f431-4e65-8dac-c599cce3b571","method":"POST","headers":{":authority":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:01:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"33c3e05c-f431-4e65-8dac-c599cce3b571","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T22:01:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"33c3e05c-f431-4e65-8dac-c599cce3b571","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"]}} {"level":"debug","ts":"2026-07-10T22:01:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"33c3e05c-f431-4e65-8dac-c599cce3b571","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4ee6ccd193f7699d3d2ac575d1fc0bc0af1de9d76c954edd7379fef966bdf49b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:01:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33c3e05c-f431-4e65-8dac-c599cce3b571","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:01:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33c3e05c-f431-4e65-8dac-c599cce3b571","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:01:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33c3e05c-f431-4e65-8dac-c599cce3b571","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f937a7/auth-test-model-f937a7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:01:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"33c3e05c-f431-4e65-8dac-c599cce3b571","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T22:01:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33c3e05c-f431-4e65-8dac-c599cce3b571","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T22:01:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33c3e05c-f431-4e65-8dac-c599cce3b571","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T22:01:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33c3e05c-f431-4e65-8dac-c599cce3b571","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T22:01:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33c3e05c-f431-4e65-8dac-c599cce3b571","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T22:01:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"432b8484-3092-4af4-b5fe-2671937c494c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:37032","PortSpecifier":{"PortValue":37032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"432b8484-3092-4af4-b5fe-2671937c494c","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T22:01:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"432b8484-3092-4af4-b5fe-2671937c494c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:37032","PortSpecifier":{"PortValue":37032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783720865,"nanos":540161395},"http":{"id":"432b8484-3092-4af4-b5fe-2671937c494c","method":"POST","headers":{":authority":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:01:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"432b8484-3092-4af4-b5fe-2671937c494c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-vZd8ewagYgb6RfiB_ZJf5K9FkkwprW7lEXs1qBazdZR2q4D33HKYiDXG2uN7"} {"level":"debug","ts":"2026-07-10T22:01:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"432b8484-3092-4af4-b5fe-2671937c494c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-22d37c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-vZd8ewagYgb6RfiB_ZJf5K9FkkwprW7lEXs1qBazdZR2q4D33HKYiDXG2uN7\"}"} {"level":"debug","ts":"2026-07-10T22:01:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"432b8484-3092-4af4-b5fe-2671937c494c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-22d37c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"aaeea693-7c7c-44c7-90f4-4a2cb0fd713a","keyName":"e2e-auth-iso-a-8b22ff","subscription":"e2e-auth-iso-246ab1","tenant":"e2e-shared-a-22d37c","userId":"aaeea693-7c7c-44c7-90f4-4a2cb0fd713a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T22:01:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"432b8484-3092-4af4-b5fe-2671937c494c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:01:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"432b8484-3092-4af4-b5fe-2671937c494c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:01:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"432b8484-3092-4af4-b5fe-2671937c494c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:01:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"432b8484-3092-4af4-b5fe-2671937c494c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-22d37c/auth-test-model-22d37c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:01:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"432b8484-3092-4af4-b5fe-2671937c494c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-246ab1"} {"level":"debug","ts":"2026-07-10T22:01:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"432b8484-3092-4af4-b5fe-2671937c494c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T22:01:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"432b8484-3092-4af4-b5fe-2671937c494c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T22:01:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"432b8484-3092-4af4-b5fe-2671937c494c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-10T22:01:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"432b8484-3092-4af4-b5fe-2671937c494c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T22:01:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"432b8484-3092-4af4-b5fe-2671937c494c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T22:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f62ce248d95bd7c7ef9219d7c6d3a75c1bb879b8e223f788ab259934a594c5ad"} {"level":"info","ts":"2026-07-10T22:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0b28b0ad46e92bdd947dd67857489d2054e3ca8d4d6cbfded28a5994d241ec2"} {"level":"info","ts":"2026-07-10T22:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7b3a472a4ae5f88ab5366ad0360406e5422f7a8fe4e265766c1b81cd2169fd98"} {"level":"info","ts":"2026-07-10T22:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/942dcf4d3278a90169ec8e27fddc5a9e327ffc605773b84bd78e7e037ce691b5"} {"level":"info","ts":"2026-07-10T22:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/191e955ae10ba6b89b9e087656a4e632cbdf616d6378a506f0d6a26d06610aed"} {"level":"info","ts":"2026-07-10T22:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7d777209872a196c48fdbfea433784cb3ab6a08fff701c2dc22e1696aac0c258"} {"level":"info","ts":"2026-07-10T22:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66de49ac3fde7f2997b0c94dc00c71c179367fbdf0392caa1507aee63ee4b289"} {"level":"info","ts":"2026-07-10T22:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2f2dbf966027b9b92a06fd9e93c1df402717d18c4c049b6d10dbe498a4f80bf"} {"level":"info","ts":"2026-07-10T22:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f0fc498b526b858ed7bda0c7dccbf7d12ae696e94da6d5e82a0ca7e90b643efd"} {"level":"info","ts":"2026-07-10T22:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5eff6abba62a2aac4ee87f369717d9d60927372b9009ef4022eaf9b8c58b10ac"} {"level":"info","ts":"2026-07-10T22:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3dbc4ac10b05904d4680f7ccc18095523d399e2578ef0088ca4696ac82e4920a"} {"level":"info","ts":"2026-07-10T22:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1bc7414ccbc2aea4b09138939d541c6d8f4bafe963f500953a5e174e79a5bf13"} {"level":"info","ts":"2026-07-10T22:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea43713390ba15e83d1e5bf405ad05a3cb807a1cd2f0ea72d1bcac36a111b62d"} {"level":"info","ts":"2026-07-10T22:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd3053b1d18b13880c1586c1c85cb77e0e060642e0dd7fbc6e986cb5aa70d471"} {"level":"info","ts":"2026-07-10T22:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6256c5e1e895a25e7e9f83a6e3dbf93d69a84ab6551d349b6f82ab111908559"} {"level":"info","ts":"2026-07-10T22:01:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db71d75205663e7a5385bafc2032e67285071ceaa66e759539478b66a600ffce"} {"level":"debug","ts":"2026-07-10T22:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a63fb7af3e3718015293633486c562daef7cc4337689b27fbf7ffa6b3f776d63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a63fb7af3e3718015293633486c562daef7cc4337689b27fbf7ffa6b3f776d63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a63fb7af3e3718015293633486c562daef7cc4337689b27fbf7ffa6b3f776d63","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a63fb7af3e3718015293633486c562daef7cc4337689b27fbf7ffa6b3f776d63"} {"level":"debug","ts":"2026-07-10T22:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a63fb7af3e3718015293633486c562daef7cc4337689b27fbf7ffa6b3f776d63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a63fb7af3e3718015293633486c562daef7cc4337689b27fbf7ffa6b3f776d63","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a63fb7af3e3718015293633486c562daef7cc4337689b27fbf7ffa6b3f776d63"} {"level":"debug","ts":"2026-07-10T22:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a63fb7af3e3718015293633486c562daef7cc4337689b27fbf7ffa6b3f776d63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a63fb7af3e3718015293633486c562daef7cc4337689b27fbf7ffa6b3f776d63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a63fb7af3e3718015293633486c562daef7cc4337689b27fbf7ffa6b3f776d63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45f64b2419a3d0ab484323156546c763ec33bc7b02fd80c5c83f2d95bb2c4c17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45f64b2419a3d0ab484323156546c763ec33bc7b02fd80c5c83f2d95bb2c4c17"} {"level":"info","ts":"2026-07-10T22:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45f64b2419a3d0ab484323156546c763ec33bc7b02fd80c5c83f2d95bb2c4c17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a63fb7af3e3718015293633486c562daef7cc4337689b27fbf7ffa6b3f776d63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a63fb7af3e3718015293633486c562daef7cc4337689b27fbf7ffa6b3f776d63"} {"level":"info","ts":"2026-07-10T22:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a63fb7af3e3718015293633486c562daef7cc4337689b27fbf7ffa6b3f776d63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45f64b2419a3d0ab484323156546c763ec33bc7b02fd80c5c83f2d95bb2c4c17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a63fb7af3e3718015293633486c562daef7cc4337689b27fbf7ffa6b3f776d63","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a63fb7af3e3718015293633486c562daef7cc4337689b27fbf7ffa6b3f776d63"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45f64b2419a3d0ab484323156546c763ec33bc7b02fd80c5c83f2d95bb2c4c17"} {"level":"info","ts":"2026-07-10T22:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a63fb7af3e3718015293633486c562daef7cc4337689b27fbf7ffa6b3f776d63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"45f64b2419a3d0ab484323156546c763ec33bc7b02fd80c5c83f2d95bb2c4c17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["45f64b2419a3d0ab484323156546c763ec33bc7b02fd80c5c83f2d95bb2c4c17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a63fb7af3e3718015293633486c562daef7cc4337689b27fbf7ffa6b3f776d63"} {"level":"info","ts":"2026-07-10T22:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"45f64b2419a3d0ab484323156546c763ec33bc7b02fd80c5c83f2d95bb2c4c17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a63fb7af3e3718015293633486c562daef7cc4337689b27fbf7ffa6b3f776d63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a4e685533883e569f21a3e2ef47bdbe0add4c5dd46fc41fb94caab06b6c5d11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a4e685533883e569f21a3e2ef47bdbe0add4c5dd46fc41fb94caab06b6c5d11"} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a4e685533883e569f21a3e2ef47bdbe0add4c5dd46fc41fb94caab06b6c5d11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45f64b2419a3d0ab484323156546c763ec33bc7b02fd80c5c83f2d95bb2c4c17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a4e685533883e569f21a3e2ef47bdbe0add4c5dd46fc41fb94caab06b6c5d11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a4e685533883e569f21a3e2ef47bdbe0add4c5dd46fc41fb94caab06b6c5d11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a63fb7af3e3718015293633486c562daef7cc4337689b27fbf7ffa6b3f776d63"} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a4e685533883e569f21a3e2ef47bdbe0add4c5dd46fc41fb94caab06b6c5d11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a4e685533883e569f21a3e2ef47bdbe0add4c5dd46fc41fb94caab06b6c5d11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a4e685533883e569f21a3e2ef47bdbe0add4c5dd46fc41fb94caab06b6c5d11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45f64b2419a3d0ab484323156546c763ec33bc7b02fd80c5c83f2d95bb2c4c17"} {"level":"error","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8a4e685533883e569f21a3e2ef47bdbe0add4c5dd46fc41fb94caab06b6c5d11","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8a4e685533883e569f21a3e2ef47bdbe0add4c5dd46fc41fb94caab06b6c5d11\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a4e685533883e569f21a3e2ef47bdbe0add4c5dd46fc41fb94caab06b6c5d11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a4e685533883e569f21a3e2ef47bdbe0add4c5dd46fc41fb94caab06b6c5d11"} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a4e685533883e569f21a3e2ef47bdbe0add4c5dd46fc41fb94caab06b6c5d11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c34c2e92b1fce89c1d1df8c707e29ce32194d17e1f44ad3664ebbae385195301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c34c2e92b1fce89c1d1df8c707e29ce32194d17e1f44ad3664ebbae385195301"} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c34c2e92b1fce89c1d1df8c707e29ce32194d17e1f44ad3664ebbae385195301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a4e685533883e569f21a3e2ef47bdbe0add4c5dd46fc41fb94caab06b6c5d11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c34c2e92b1fce89c1d1df8c707e29ce32194d17e1f44ad3664ebbae385195301","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c34c2e92b1fce89c1d1df8c707e29ce32194d17e1f44ad3664ebbae385195301"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a4e685533883e569f21a3e2ef47bdbe0add4c5dd46fc41fb94caab06b6c5d11"} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c34c2e92b1fce89c1d1df8c707e29ce32194d17e1f44ad3664ebbae385195301"} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e693bd26823fdefb83bf6f222b1c52f56205c1a47a563dc9c6b2730a36473d69"} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c34c2e92b1fce89c1d1df8c707e29ce32194d17e1f44ad3664ebbae385195301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e693bd26823fdefb83bf6f222b1c52f56205c1a47a563dc9c6b2730a36473d69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e693bd26823fdefb83bf6f222b1c52f56205c1a47a563dc9c6b2730a36473d69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce"} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e693bd26823fdefb83bf6f222b1c52f56205c1a47a563dc9c6b2730a36473d69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a4e685533883e569f21a3e2ef47bdbe0add4c5dd46fc41fb94caab06b6c5d11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a4e685533883e569f21a3e2ef47bdbe0add4c5dd46fc41fb94caab06b6c5d11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c34c2e92b1fce89c1d1df8c707e29ce32194d17e1f44ad3664ebbae385195301"} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a4e685533883e569f21a3e2ef47bdbe0add4c5dd46fc41fb94caab06b6c5d11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c34c2e92b1fce89c1d1df8c707e29ce32194d17e1f44ad3664ebbae385195301","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e693bd26823fdefb83bf6f222b1c52f56205c1a47a563dc9c6b2730a36473d69"} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e693bd26823fdefb83bf6f222b1c52f56205c1a47a563dc9c6b2730a36473d69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"195997a91a46b5ec113f0f20b17226d82741fe78c4a3557687b027633a5f4d2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/195997a91a46b5ec113f0f20b17226d82741fe78c4a3557687b027633a5f4d2b"} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"195997a91a46b5ec113f0f20b17226d82741fe78c4a3557687b027633a5f4d2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a4e685533883e569f21a3e2ef47bdbe0add4c5dd46fc41fb94caab06b6c5d11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a4e685533883e569f21a3e2ef47bdbe0add4c5dd46fc41fb94caab06b6c5d11"} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a4e685533883e569f21a3e2ef47bdbe0add4c5dd46fc41fb94caab06b6c5d11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce"} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"195997a91a46b5ec113f0f20b17226d82741fe78c4a3557687b027633a5f4d2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a4e685533883e569f21a3e2ef47bdbe0add4c5dd46fc41fb94caab06b6c5d11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a4e685533883e569f21a3e2ef47bdbe0add4c5dd46fc41fb94caab06b6c5d11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/195997a91a46b5ec113f0f20b17226d82741fe78c4a3557687b027633a5f4d2b"} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a4e685533883e569f21a3e2ef47bdbe0add4c5dd46fc41fb94caab06b6c5d11"} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a4e685533883e569f21a3e2ef47bdbe0add4c5dd46fc41fb94caab06b6c5d11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba7a5dd4d6a8c889bb377fb34a7ef3c29840e446c9e67e40cf935665383bd38d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7a5dd4d6a8c889bb377fb34a7ef3c29840e446c9e67e40cf935665383bd38d"} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba7a5dd4d6a8c889bb377fb34a7ef3c29840e446c9e67e40cf935665383bd38d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"195997a91a46b5ec113f0f20b17226d82741fe78c4a3557687b027633a5f4d2b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["195997a91a46b5ec113f0f20b17226d82741fe78c4a3557687b027633a5f4d2b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce"} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"195997a91a46b5ec113f0f20b17226d82741fe78c4a3557687b027633a5f4d2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a4e685533883e569f21a3e2ef47bdbe0add4c5dd46fc41fb94caab06b6c5d11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a4e685533883e569f21a3e2ef47bdbe0add4c5dd46fc41fb94caab06b6c5d11"} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a4e685533883e569f21a3e2ef47bdbe0add4c5dd46fc41fb94caab06b6c5d11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba7a5dd4d6a8c889bb377fb34a7ef3c29840e446c9e67e40cf935665383bd38d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7a5dd4d6a8c889bb377fb34a7ef3c29840e446c9e67e40cf935665383bd38d"} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/195997a91a46b5ec113f0f20b17226d82741fe78c4a3557687b027633a5f4d2b"} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"195997a91a46b5ec113f0f20b17226d82741fe78c4a3557687b027633a5f4d2b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a4e685533883e569f21a3e2ef47bdbe0add4c5dd46fc41fb94caab06b6c5d11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba7a5dd4d6a8c889bb377fb34a7ef3c29840e446c9e67e40cf935665383bd38d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba7a5dd4d6a8c889bb377fb34a7ef3c29840e446c9e67e40cf935665383bd38d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a4e685533883e569f21a3e2ef47bdbe0add4c5dd46fc41fb94caab06b6c5d11"} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba7a5dd4d6a8c889bb377fb34a7ef3c29840e446c9e67e40cf935665383bd38d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce"} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a4e685533883e569f21a3e2ef47bdbe0add4c5dd46fc41fb94caab06b6c5d11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a4e685533883e569f21a3e2ef47bdbe0add4c5dd46fc41fb94caab06b6c5d11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7a5dd4d6a8c889bb377fb34a7ef3c29840e446c9e67e40cf935665383bd38d"} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a4e685533883e569f21a3e2ef47bdbe0add4c5dd46fc41fb94caab06b6c5d11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba7a5dd4d6a8c889bb377fb34a7ef3c29840e446c9e67e40cf935665383bd38d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a4e685533883e569f21a3e2ef47bdbe0add4c5dd46fc41fb94caab06b6c5d11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce"} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a4e685533883e569f21a3e2ef47bdbe0add4c5dd46fc41fb94caab06b6c5d11"} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce"} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce"} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce"} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce"} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce"} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce"} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce"} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce"} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce"} {"level":"info","ts":"2026-07-10T22:01:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce"} {"level":"info","ts":"2026-07-10T22:01:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T22:01:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T22:01:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce"} {"level":"info","ts":"2026-07-10T22:01:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce"} {"level":"debug","ts":"2026-07-10T22:01:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:23Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:23Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce"} {"level":"info","ts":"2026-07-10T22:01:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce"} {"level":"debug","ts":"2026-07-10T22:01:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:23Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:23Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce"} {"level":"debug","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bda1c1533fa75ff1ea88b4750698dba0346a786ebe692608c1f97c1be2caae9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bda1c1533fa75ff1ea88b4750698dba0346a786ebe692608c1f97c1be2caae9c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bda1c1533fa75ff1ea88b4750698dba0346a786ebe692608c1f97c1be2caae9c"} {"level":"debug","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bda1c1533fa75ff1ea88b4750698dba0346a786ebe692608c1f97c1be2caae9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bda1c1533fa75ff1ea88b4750698dba0346a786ebe692608c1f97c1be2caae9c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bda1c1533fa75ff1ea88b4750698dba0346a786ebe692608c1f97c1be2caae9c"} {"level":"debug","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bda1c1533fa75ff1ea88b4750698dba0346a786ebe692608c1f97c1be2caae9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bda1c1533fa75ff1ea88b4750698dba0346a786ebe692608c1f97c1be2caae9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bda1c1533fa75ff1ea88b4750698dba0346a786ebe692608c1f97c1be2caae9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bda1c1533fa75ff1ea88b4750698dba0346a786ebe692608c1f97c1be2caae9c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bda1c1533fa75ff1ea88b4750698dba0346a786ebe692608c1f97c1be2caae9c"} {"level":"debug","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2"} {"level":"debug","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2"} {"level":"debug","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2"} {"level":"debug","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2"} {"level":"debug","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2"} {"level":"debug","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2"} {"level":"debug","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2"} {"level":"debug","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2"} {"level":"debug","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2"} {"level":"debug","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2"} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d65bcf1818dae3ff513a3a57757dca3ed355ede6efab817c980153a481269a51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2"} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d65bcf1818dae3ff513a3a57757dca3ed355ede6efab817c980153a481269a51"} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d65bcf1818dae3ff513a3a57757dca3ed355ede6efab817c980153a481269a51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d65bcf1818dae3ff513a3a57757dca3ed355ede6efab817c980153a481269a51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d65bcf1818dae3ff513a3a57757dca3ed355ede6efab817c980153a481269a51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d65bcf1818dae3ff513a3a57757dca3ed355ede6efab817c980153a481269a51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d65bcf1818dae3ff513a3a57757dca3ed355ede6efab817c980153a481269a51"} {"level":"error","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d65bcf1818dae3ff513a3a57757dca3ed355ede6efab817c980153a481269a51","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d65bcf1818dae3ff513a3a57757dca3ed355ede6efab817c980153a481269a51\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d65bcf1818dae3ff513a3a57757dca3ed355ede6efab817c980153a481269a51","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d65bcf1818dae3ff513a3a57757dca3ed355ede6efab817c980153a481269a51"} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d65bcf1818dae3ff513a3a57757dca3ed355ede6efab817c980153a481269a51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d65bcf1818dae3ff513a3a57757dca3ed355ede6efab817c980153a481269a51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d65bcf1818dae3ff513a3a57757dca3ed355ede6efab817c980153a481269a51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d65bcf1818dae3ff513a3a57757dca3ed355ede6efab817c980153a481269a51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d65bcf1818dae3ff513a3a57757dca3ed355ede6efab817c980153a481269a51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d65bcf1818dae3ff513a3a57757dca3ed355ede6efab817c980153a481269a51","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d65bcf1818dae3ff513a3a57757dca3ed355ede6efab817c980153a481269a51"} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d65bcf1818dae3ff513a3a57757dca3ed355ede6efab817c980153a481269a51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d65bcf1818dae3ff513a3a57757dca3ed355ede6efab817c980153a481269a51","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d65bcf1818dae3ff513a3a57757dca3ed355ede6efab817c980153a481269a51"} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d65bcf1818dae3ff513a3a57757dca3ed355ede6efab817c980153a481269a51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d65bcf1818dae3ff513a3a57757dca3ed355ede6efab817c980153a481269a51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d65bcf1818dae3ff513a3a57757dca3ed355ede6efab817c980153a481269a51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d65bcf1818dae3ff513a3a57757dca3ed355ede6efab817c980153a481269a51","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d65bcf1818dae3ff513a3a57757dca3ed355ede6efab817c980153a481269a51"} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aeebae755cd095c6827043f10d41b48c607d1c6d69ad5fe477515df687e651a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aeebae755cd095c6827043f10d41b48c607d1c6d69ad5fe477515df687e651a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aeebae755cd095c6827043f10d41b48c607d1c6d69ad5fe477515df687e651a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeebae755cd095c6827043f10d41b48c607d1c6d69ad5fe477515df687e651a1"} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aeebae755cd095c6827043f10d41b48c607d1c6d69ad5fe477515df687e651a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aeebae755cd095c6827043f10d41b48c607d1c6d69ad5fe477515df687e651a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeebae755cd095c6827043f10d41b48c607d1c6d69ad5fe477515df687e651a1"} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aeebae755cd095c6827043f10d41b48c607d1c6d69ad5fe477515df687e651a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aeebae755cd095c6827043f10d41b48c607d1c6d69ad5fe477515df687e651a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aeebae755cd095c6827043f10d41b48c607d1c6d69ad5fe477515df687e651a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aeebae755cd095c6827043f10d41b48c607d1c6d69ad5fe477515df687e651a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5df678b42d7464f7e38a5c14f3d320e7d85bd68748dd30bab2f956f01b24b0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5df678b42d7464f7e38a5c14f3d320e7d85bd68748dd30bab2f956f01b24b0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5df678b42d7464f7e38a5c14f3d320e7d85bd68748dd30bab2f956f01b24b0a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeebae755cd095c6827043f10d41b48c607d1c6d69ad5fe477515df687e651a1"} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5df678b42d7464f7e38a5c14f3d320e7d85bd68748dd30bab2f956f01b24b0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5df678b42d7464f7e38a5c14f3d320e7d85bd68748dd30bab2f956f01b24b0a"} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5df678b42d7464f7e38a5c14f3d320e7d85bd68748dd30bab2f956f01b24b0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5df678b42d7464f7e38a5c14f3d320e7d85bd68748dd30bab2f956f01b24b0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5df678b42d7464f7e38a5c14f3d320e7d85bd68748dd30bab2f956f01b24b0a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5df678b42d7464f7e38a5c14f3d320e7d85bd68748dd30bab2f956f01b24b0a"} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f42882d64e682f7759994cf5c2913c57623ffb2ac8efcff5325c53cfb5e0ba73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f42882d64e682f7759994cf5c2913c57623ffb2ac8efcff5325c53cfb5e0ba73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f42882d64e682f7759994cf5c2913c57623ffb2ac8efcff5325c53cfb5e0ba73","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f42882d64e682f7759994cf5c2913c57623ffb2ac8efcff5325c53cfb5e0ba73"} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f42882d64e682f7759994cf5c2913c57623ffb2ac8efcff5325c53cfb5e0ba73","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f42882d64e682f7759994cf5c2913c57623ffb2ac8efcff5325c53cfb5e0ba73"} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f42882d64e682f7759994cf5c2913c57623ffb2ac8efcff5325c53cfb5e0ba73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f42882d64e682f7759994cf5c2913c57623ffb2ac8efcff5325c53cfb5e0ba73"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f42882d64e682f7759994cf5c2913c57623ffb2ac8efcff5325c53cfb5e0ba73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5df678b42d7464f7e38a5c14f3d320e7d85bd68748dd30bab2f956f01b24b0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5df678b42d7464f7e38a5c14f3d320e7d85bd68748dd30bab2f956f01b24b0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5df678b42d7464f7e38a5c14f3d320e7d85bd68748dd30bab2f956f01b24b0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f42882d64e682f7759994cf5c2913c57623ffb2ac8efcff5325c53cfb5e0ba73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f42882d64e682f7759994cf5c2913c57623ffb2ac8efcff5325c53cfb5e0ba73"} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f42882d64e682f7759994cf5c2913c57623ffb2ac8efcff5325c53cfb5e0ba73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5df678b42d7464f7e38a5c14f3d320e7d85bd68748dd30bab2f956f01b24b0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5df678b42d7464f7e38a5c14f3d320e7d85bd68748dd30bab2f956f01b24b0a"} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5df678b42d7464f7e38a5c14f3d320e7d85bd68748dd30bab2f956f01b24b0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11d4c922e2e566988feeadcfb5eebad71d8bcce6982f5b063b1fce21f90230ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11d4c922e2e566988feeadcfb5eebad71d8bcce6982f5b063b1fce21f90230ad"} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11d4c922e2e566988feeadcfb5eebad71d8bcce6982f5b063b1fce21f90230ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f42882d64e682f7759994cf5c2913c57623ffb2ac8efcff5325c53cfb5e0ba73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5df678b42d7464f7e38a5c14f3d320e7d85bd68748dd30bab2f956f01b24b0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5df678b42d7464f7e38a5c14f3d320e7d85bd68748dd30bab2f956f01b24b0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f42882d64e682f7759994cf5c2913c57623ffb2ac8efcff5325c53cfb5e0ba73"} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5df678b42d7464f7e38a5c14f3d320e7d85bd68748dd30bab2f956f01b24b0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11d4c922e2e566988feeadcfb5eebad71d8bcce6982f5b063b1fce21f90230ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11d4c922e2e566988feeadcfb5eebad71d8bcce6982f5b063b1fce21f90230ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5df678b42d7464f7e38a5c14f3d320e7d85bd68748dd30bab2f956f01b24b0a"} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11d4c922e2e566988feeadcfb5eebad71d8bcce6982f5b063b1fce21f90230ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f42882d64e682f7759994cf5c2913c57623ffb2ac8efcff5325c53cfb5e0ba73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f42882d64e682f7759994cf5c2913c57623ffb2ac8efcff5325c53cfb5e0ba73"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11d4c922e2e566988feeadcfb5eebad71d8bcce6982f5b063b1fce21f90230ad"} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f42882d64e682f7759994cf5c2913c57623ffb2ac8efcff5325c53cfb5e0ba73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5df678b42d7464f7e38a5c14f3d320e7d85bd68748dd30bab2f956f01b24b0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5df678b42d7464f7e38a5c14f3d320e7d85bd68748dd30bab2f956f01b24b0a"} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5df678b42d7464f7e38a5c14f3d320e7d85bd68748dd30bab2f956f01b24b0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11d4c922e2e566988feeadcfb5eebad71d8bcce6982f5b063b1fce21f90230ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11d4c922e2e566988feeadcfb5eebad71d8bcce6982f5b063b1fce21f90230ad"} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11d4c922e2e566988feeadcfb5eebad71d8bcce6982f5b063b1fce21f90230ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f42882d64e682f7759994cf5c2913c57623ffb2ac8efcff5325c53cfb5e0ba73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f42882d64e682f7759994cf5c2913c57623ffb2ac8efcff5325c53cfb5e0ba73"} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f42882d64e682f7759994cf5c2913c57623ffb2ac8efcff5325c53cfb5e0ba73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5df678b42d7464f7e38a5c14f3d320e7d85bd68748dd30bab2f956f01b24b0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"11d4c922e2e566988feeadcfb5eebad71d8bcce6982f5b063b1fce21f90230ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["11d4c922e2e566988feeadcfb5eebad71d8bcce6982f5b063b1fce21f90230ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5df678b42d7464f7e38a5c14f3d320e7d85bd68748dd30bab2f956f01b24b0a"} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"11d4c922e2e566988feeadcfb5eebad71d8bcce6982f5b063b1fce21f90230ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f42882d64e682f7759994cf5c2913c57623ffb2ac8efcff5325c53cfb5e0ba73","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f42882d64e682f7759994cf5c2913c57623ffb2ac8efcff5325c53cfb5e0ba73"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11d4c922e2e566988feeadcfb5eebad71d8bcce6982f5b063b1fce21f90230ad"} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f42882d64e682f7759994cf5c2913c57623ffb2ac8efcff5325c53cfb5e0ba73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5df678b42d7464f7e38a5c14f3d320e7d85bd68748dd30bab2f956f01b24b0a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5df678b42d7464f7e38a5c14f3d320e7d85bd68748dd30bab2f956f01b24b0a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5df678b42d7464f7e38a5c14f3d320e7d85bd68748dd30bab2f956f01b24b0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f42882d64e682f7759994cf5c2913c57623ffb2ac8efcff5325c53cfb5e0ba73"} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11d4c922e2e566988feeadcfb5eebad71d8bcce6982f5b063b1fce21f90230ad","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f42882d64e682f7759994cf5c2913c57623ffb2ac8efcff5325c53cfb5e0ba73","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5df678b42d7464f7e38a5c14f3d320e7d85bd68748dd30bab2f956f01b24b0a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec"} {"level":"info","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11d4c922e2e566988feeadcfb5eebad71d8bcce6982f5b063b1fce21f90230ad"} {"level":"info","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5df678b42d7464f7e38a5c14f3d320e7d85bd68748dd30bab2f956f01b24b0a"} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f42882d64e682f7759994cf5c2913c57623ffb2ac8efcff5325c53cfb5e0ba73"} {"level":"info","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec"} {"level":"info","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec"} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec"} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec"} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec"} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec"} {"level":"info","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec"} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec"} {"level":"info","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec"} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec"} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec"} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec"} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec"} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec"} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec"} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec"} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec"} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec"} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec"} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:01:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:01:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec"} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec"} {"level":"debug","ts":"2026-07-10T22:01:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:01:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:01:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:01:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec"} {"level":"debug","ts":"2026-07-10T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f92327560fbb6b041809a439f337fe3c4618adf05e786796fae9dc2363b6996","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f92327560fbb6b041809a439f337fe3c4618adf05e786796fae9dc2363b6996"} {"level":"info","ts":"2026-07-10T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f92327560fbb6b041809a439f337fe3c4618adf05e786796fae9dc2363b6996","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f92327560fbb6b041809a439f337fe3c4618adf05e786796fae9dc2363b6996","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f92327560fbb6b041809a439f337fe3c4618adf05e786796fae9dc2363b6996"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f92327560fbb6b041809a439f337fe3c4618adf05e786796fae9dc2363b6996","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f92327560fbb6b041809a439f337fe3c4618adf05e786796fae9dc2363b6996","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f92327560fbb6b041809a439f337fe3c4618adf05e786796fae9dc2363b6996","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f92327560fbb6b041809a439f337fe3c4618adf05e786796fae9dc2363b6996"} {"level":"info","ts":"2026-07-10T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f92327560fbb6b041809a439f337fe3c4618adf05e786796fae9dc2363b6996","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f92327560fbb6b041809a439f337fe3c4618adf05e786796fae9dc2363b6996","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f92327560fbb6b041809a439f337fe3c4618adf05e786796fae9dc2363b6996"} {"level":"error","ts":"2026-07-10T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"1f92327560fbb6b041809a439f337fe3c4618adf05e786796fae9dc2363b6996","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"1f92327560fbb6b041809a439f337fe3c4618adf05e786796fae9dc2363b6996\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f92327560fbb6b041809a439f337fe3c4618adf05e786796fae9dc2363b6996","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f92327560fbb6b041809a439f337fe3c4618adf05e786796fae9dc2363b6996","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f92327560fbb6b041809a439f337fe3c4618adf05e786796fae9dc2363b6996"} {"level":"debug","ts":"2026-07-10T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f92327560fbb6b041809a439f337fe3c4618adf05e786796fae9dc2363b6996","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f92327560fbb6b041809a439f337fe3c4618adf05e786796fae9dc2363b6996"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f92327560fbb6b041809a439f337fe3c4618adf05e786796fae9dc2363b6996","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f92327560fbb6b041809a439f337fe3c4618adf05e786796fae9dc2363b6996","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:02:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f92327560fbb6b041809a439f337fe3c4618adf05e786796fae9dc2363b6996"} {"level":"debug","ts":"2026-07-10T22:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985"} {"level":"debug","ts":"2026-07-10T22:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ee6ccd193f7699d3d2ac575d1fc0bc0af1de9d76c954edd7379fef966bdf49b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ee6ccd193f7699d3d2ac575d1fc0bc0af1de9d76c954edd7379fef966bdf49b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ee6ccd193f7699d3d2ac575d1fc0bc0af1de9d76c954edd7379fef966bdf49b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ee6ccd193f7699d3d2ac575d1fc0bc0af1de9d76c954edd7379fef966bdf49b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ee6ccd193f7699d3d2ac575d1fc0bc0af1de9d76c954edd7379fef966bdf49b"} {"level":"debug","ts":"2026-07-10T22:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ee6ccd193f7699d3d2ac575d1fc0bc0af1de9d76c954edd7379fef966bdf49b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ee6ccd193f7699d3d2ac575d1fc0bc0af1de9d76c954edd7379fef966bdf49b"} {"level":"debug","ts":"2026-07-10T22:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ee6ccd193f7699d3d2ac575d1fc0bc0af1de9d76c954edd7379fef966bdf49b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ee6ccd193f7699d3d2ac575d1fc0bc0af1de9d76c954edd7379fef966bdf49b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ee6ccd193f7699d3d2ac575d1fc0bc0af1de9d76c954edd7379fef966bdf49b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ee6ccd193f7699d3d2ac575d1fc0bc0af1de9d76c954edd7379fef966bdf49b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d65bcf1818dae3ff513a3a57757dca3ed355ede6efab817c980153a481269a51","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ee6ccd193f7699d3d2ac575d1fc0bc0af1de9d76c954edd7379fef966bdf49b"} {"level":"info","ts":"2026-07-10T22:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d65bcf1818dae3ff513a3a57757dca3ed355ede6efab817c980153a481269a51"} {"level":"debug","ts":"2026-07-10T22:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"11d4c922e2e566988feeadcfb5eebad71d8bcce6982f5b063b1fce21f90230ad","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/11d4c922e2e566988feeadcfb5eebad71d8bcce6982f5b063b1fce21f90230ad"} {"level":"debug","ts":"2026-07-10T22:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e693bd26823fdefb83bf6f222b1c52f56205c1a47a563dc9c6b2730a36473d69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e693bd26823fdefb83bf6f222b1c52f56205c1a47a563dc9c6b2730a36473d69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e693bd26823fdefb83bf6f222b1c52f56205c1a47a563dc9c6b2730a36473d69","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e693bd26823fdefb83bf6f222b1c52f56205c1a47a563dc9c6b2730a36473d69"} {"level":"debug","ts":"2026-07-10T22:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e693bd26823fdefb83bf6f222b1c52f56205c1a47a563dc9c6b2730a36473d69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e693bd26823fdefb83bf6f222b1c52f56205c1a47a563dc9c6b2730a36473d69","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e693bd26823fdefb83bf6f222b1c52f56205c1a47a563dc9c6b2730a36473d69"} {"level":"debug","ts":"2026-07-10T22:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e693bd26823fdefb83bf6f222b1c52f56205c1a47a563dc9c6b2730a36473d69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e693bd26823fdefb83bf6f222b1c52f56205c1a47a563dc9c6b2730a36473d69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e693bd26823fdefb83bf6f222b1c52f56205c1a47a563dc9c6b2730a36473d69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e693bd26823fdefb83bf6f222b1c52f56205c1a47a563dc9c6b2730a36473d69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e693bd26823fdefb83bf6f222b1c52f56205c1a47a563dc9c6b2730a36473d69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e693bd26823fdefb83bf6f222b1c52f56205c1a47a563dc9c6b2730a36473d69","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e693bd26823fdefb83bf6f222b1c52f56205c1a47a563dc9c6b2730a36473d69"} {"level":"debug","ts":"2026-07-10T22:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e693bd26823fdefb83bf6f222b1c52f56205c1a47a563dc9c6b2730a36473d69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e693bd26823fdefb83bf6f222b1c52f56205c1a47a563dc9c6b2730a36473d69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2"} {"level":"info","ts":"2026-07-10T22:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e693bd26823fdefb83bf6f222b1c52f56205c1a47a563dc9c6b2730a36473d69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e693bd26823fdefb83bf6f222b1c52f56205c1a47a563dc9c6b2730a36473d69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e693bd26823fdefb83bf6f222b1c52f56205c1a47a563dc9c6b2730a36473d69","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e693bd26823fdefb83bf6f222b1c52f56205c1a47a563dc9c6b2730a36473d69"} {"level":"debug","ts":"2026-07-10T22:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e693bd26823fdefb83bf6f222b1c52f56205c1a47a563dc9c6b2730a36473d69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e693bd26823fdefb83bf6f222b1c52f56205c1a47a563dc9c6b2730a36473d69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e693bd26823fdefb83bf6f222b1c52f56205c1a47a563dc9c6b2730a36473d69","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e693bd26823fdefb83bf6f222b1c52f56205c1a47a563dc9c6b2730a36473d69"} {"level":"debug","ts":"2026-07-10T22:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69830b596606ab5bdce8b430a5c4b2cacc0abc7950fa8ce038a7816dbae27c96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e693bd26823fdefb83bf6f222b1c52f56205c1a47a563dc9c6b2730a36473d69","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e693bd26823fdefb83bf6f222b1c52f56205c1a47a563dc9c6b2730a36473d69"} {"level":"info","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69830b596606ab5bdce8b430a5c4b2cacc0abc7950fa8ce038a7816dbae27c96"} {"level":"debug","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bda1c1533fa75ff1ea88b4750698dba0346a786ebe692608c1f97c1be2caae9c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e693bd26823fdefb83bf6f222b1c52f56205c1a47a563dc9c6b2730a36473d69","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e693bd26823fdefb83bf6f222b1c52f56205c1a47a563dc9c6b2730a36473d69"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e693bd26823fdefb83bf6f222b1c52f56205c1a47a563dc9c6b2730a36473d69","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cf15b8af555d6bf30162ba84362b38e75fa80217b8f39ee0d5c2ba6a1fa06f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e693bd26823fdefb83bf6f222b1c52f56205c1a47a563dc9c6b2730a36473d69","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bda1c1533fa75ff1ea88b4750698dba0346a786ebe692608c1f97c1be2caae9c"} {"level":"info","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cf15b8af555d6bf30162ba84362b38e75fa80217b8f39ee0d5c2ba6a1fa06f0"} {"level":"info","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e693bd26823fdefb83bf6f222b1c52f56205c1a47a563dc9c6b2730a36473d69"} {"level":"debug","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c2ce3c04cca05a440d30c1000fafd89d41c12cfafd9c0fe53e35d513d976dc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c2ce3c04cca05a440d30c1000fafd89d41c12cfafd9c0fe53e35d513d976dc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c2ce3c04cca05a440d30c1000fafd89d41c12cfafd9c0fe53e35d513d976dc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c34c2e92b1fce89c1d1df8c707e29ce32194d17e1f44ad3664ebbae385195301","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c2ce3c04cca05a440d30c1000fafd89d41c12cfafd9c0fe53e35d513d976dc7"} {"level":"debug","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3c2ce3c04cca05a440d30c1000fafd89d41c12cfafd9c0fe53e35d513d976dc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3c2ce3c04cca05a440d30c1000fafd89d41c12cfafd9c0fe53e35d513d976dc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3c2ce3c04cca05a440d30c1000fafd89d41c12cfafd9c0fe53e35d513d976dc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c2ce3c04cca05a440d30c1000fafd89d41c12cfafd9c0fe53e35d513d976dc7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c34c2e92b1fce89c1d1df8c707e29ce32194d17e1f44ad3664ebbae385195301"} {"level":"info","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c2ce3c04cca05a440d30c1000fafd89d41c12cfafd9c0fe53e35d513d976dc7"} {"level":"debug","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aeebae755cd095c6827043f10d41b48c607d1c6d69ad5fe477515df687e651a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aeebae755cd095c6827043f10d41b48c607d1c6d69ad5fe477515df687e651a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aeebae755cd095c6827043f10d41b48c607d1c6d69ad5fe477515df687e651a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba7a5dd4d6a8c889bb377fb34a7ef3c29840e446c9e67e40cf935665383bd38d","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aeebae755cd095c6827043f10d41b48c607d1c6d69ad5fe477515df687e651a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeebae755cd095c6827043f10d41b48c607d1c6d69ad5fe477515df687e651a1"} {"level":"debug","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aeebae755cd095c6827043f10d41b48c607d1c6d69ad5fe477515df687e651a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aeebae755cd095c6827043f10d41b48c607d1c6d69ad5fe477515df687e651a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7a5dd4d6a8c889bb377fb34a7ef3c29840e446c9e67e40cf935665383bd38d"} {"level":"info","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aeebae755cd095c6827043f10d41b48c607d1c6d69ad5fe477515df687e651a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aeebae755cd095c6827043f10d41b48c607d1c6d69ad5fe477515df687e651a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeebae755cd095c6827043f10d41b48c607d1c6d69ad5fe477515df687e651a1"} {"level":"info","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aeebae755cd095c6827043f10d41b48c607d1c6d69ad5fe477515df687e651a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aeebae755cd095c6827043f10d41b48c607d1c6d69ad5fe477515df687e651a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aeebae755cd095c6827043f10d41b48c607d1c6d69ad5fe477515df687e651a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeebae755cd095c6827043f10d41b48c607d1c6d69ad5fe477515df687e651a1"} {"level":"debug","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aeebae755cd095c6827043f10d41b48c607d1c6d69ad5fe477515df687e651a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeebae755cd095c6827043f10d41b48c607d1c6d69ad5fe477515df687e651a1"} {"level":"debug","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"45f64b2419a3d0ab484323156546c763ec33bc7b02fd80c5c83f2d95bb2c4c17","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5df678b42d7464f7e38a5c14f3d320e7d85bd68748dd30bab2f956f01b24b0a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce"} {"level":"debug","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aeebae755cd095c6827043f10d41b48c607d1c6d69ad5fe477515df687e651a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aeebae755cd095c6827043f10d41b48c607d1c6d69ad5fe477515df687e651a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aeebae755cd095c6827043f10d41b48c607d1c6d69ad5fe477515df687e651a1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e453737804b21837c343736e1d1641468db9507ae64fabac5d82ca79ddf2f34","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aeebae755cd095c6827043f10d41b48c607d1c6d69ad5fe477515df687e651a1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/45f64b2419a3d0ab484323156546c763ec33bc7b02fd80c5c83f2d95bb2c4c17"} {"level":"info","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5df678b42d7464f7e38a5c14f3d320e7d85bd68748dd30bab2f956f01b24b0a"} {"level":"debug","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a4e685533883e569f21a3e2ef47bdbe0add4c5dd46fc41fb94caab06b6c5d11","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e453737804b21837c343736e1d1641468db9507ae64fabac5d82ca79ddf2f34"} {"level":"debug","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8566544751d451d6562df1499b985efb50b4220a986a2712dde6f4bd1a27898a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aeebae755cd095c6827043f10d41b48c607d1c6d69ad5fe477515df687e651a1"} {"level":"debug","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"195997a91a46b5ec113f0f20b17226d82741fe78c4a3557687b027633a5f4d2b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a4e685533883e569f21a3e2ef47bdbe0add4c5dd46fc41fb94caab06b6c5d11"} {"level":"debug","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a63fb7af3e3718015293633486c562daef7cc4337689b27fbf7ffa6b3f776d63","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f42882d64e682f7759994cf5c2913c57623ffb2ac8efcff5325c53cfb5e0ba73","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8566544751d451d6562df1499b985efb50b4220a986a2712dde6f4bd1a27898a"} {"level":"info","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/195997a91a46b5ec113f0f20b17226d82741fe78c4a3557687b027633a5f4d2b"} {"level":"debug","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a63fb7af3e3718015293633486c562daef7cc4337689b27fbf7ffa6b3f776d63"} {"level":"info","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f42882d64e682f7759994cf5c2913c57623ffb2ac8efcff5325c53cfb5e0ba73"} {"level":"info","ts":"2026-07-10T22:02:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec"} {"level":"info","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a2fd8b2-c7ad-4dc5-9e44-2b97450e9559","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:50772","PortSpecifier":{"PortValue":50772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8a2fd8b2-c7ad-4dc5-9e44-2b97450e9559","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a2fd8b2-c7ad-4dc5-9e44-2b97450e9559","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:50772","PortSpecifier":{"PortValue":50772}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783720926,"nanos":596210935},"http":{"id":"8a2fd8b2-c7ad-4dc5-9e44-2b97450e9559","method":"POST","headers":{":authority":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8a2fd8b2-c7ad-4dc5-9e44-2b97450e9559","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8a2fd8b2-c7ad-4dc5-9e44-2b97450e9559","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"]}} {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8a2fd8b2-c7ad-4dc5-9e44-2b97450e9559","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4e453737804b21837c343736e1d1641468db9507ae64fabac5d82ca79ddf2f34"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a2fd8b2-c7ad-4dc5-9e44-2b97450e9559","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a2fd8b2-c7ad-4dc5-9e44-2b97450e9559","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a2fd8b2-c7ad-4dc5-9e44-2b97450e9559","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-22d37c/sub-test-model-22d37c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8a2fd8b2-c7ad-4dc5-9e44-2b97450e9559","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a2fd8b2-c7ad-4dc5-9e44-2b97450e9559","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a2fd8b2-c7ad-4dc5-9e44-2b97450e9559","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a2fd8b2-c7ad-4dc5-9e44-2b97450e9559","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a2fd8b2-c7ad-4dc5-9e44-2b97450e9559","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3816e75-3ebe-4ab1-9302-ca40fb87ba53","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:44474","PortSpecifier":{"PortValue":44474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f3816e75-3ebe-4ab1-9302-ca40fb87ba53","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3816e75-3ebe-4ab1-9302-ca40fb87ba53","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:44474","PortSpecifier":{"PortValue":44474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783720926,"nanos":642327236},"http":{"id":"f3816e75-3ebe-4ab1-9302-ca40fb87ba53","method":"POST","headers":{":authority":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f3816e75-3ebe-4ab1-9302-ca40fb87ba53","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f3816e75-3ebe-4ab1-9302-ca40fb87ba53","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"]}} {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f3816e75-3ebe-4ab1-9302-ca40fb87ba53","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4ee6ccd193f7699d3d2ac575d1fc0bc0af1de9d76c954edd7379fef966bdf49b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3816e75-3ebe-4ab1-9302-ca40fb87ba53","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3816e75-3ebe-4ab1-9302-ca40fb87ba53","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3816e75-3ebe-4ab1-9302-ca40fb87ba53","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f937a7/sub-test-model-f937a7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f3816e75-3ebe-4ab1-9302-ca40fb87ba53","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3816e75-3ebe-4ab1-9302-ca40fb87ba53","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3816e75-3ebe-4ab1-9302-ca40fb87ba53","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3816e75-3ebe-4ab1-9302-ca40fb87ba53","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3816e75-3ebe-4ab1-9302-ca40fb87ba53","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e215498-a4c7-419c-82b0-d934b8434780","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:50780","PortSpecifier":{"PortValue":50780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5e215498-a4c7-419c-82b0-d934b8434780","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e215498-a4c7-419c-82b0-d934b8434780","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:50780","PortSpecifier":{"PortValue":50780}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783720926,"nanos":680756331},"http":{"id":"5e215498-a4c7-419c-82b0-d934b8434780","method":"GET","headers":{":authority":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5e215498-a4c7-419c-82b0-d934b8434780","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-EWgkC4eIfrgWM6AF_OaDglJvk7IWVSWCtWu0Ebzbq8x08y1HJbJX3Dviys4M"} {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5e215498-a4c7-419c-82b0-d934b8434780","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-22d37c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-EWgkC4eIfrgWM6AF_OaDglJvk7IWVSWCtWu0Ebzbq8x08y1HJbJX3Dviys4M\"}"} {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5e215498-a4c7-419c-82b0-d934b8434780","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-22d37c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"08bfc714-ed91-48c6-9c2b-2d9100af0f94","keyName":"e2e-sub-iso-c58cfa","subscription":"e2e-a-only-a63d8b","tenant":"e2e-shared-a-22d37c","userId":"08bfc714-ed91-48c6-9c2b-2d9100af0f94","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5e215498-a4c7-419c-82b0-d934b8434780","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e215498-a4c7-419c-82b0-d934b8434780","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e215498-a4c7-419c-82b0-d934b8434780","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e215498-a4c7-419c-82b0-d934b8434780","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-22d37c/sub-test-model-22d37c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e215498-a4c7-419c-82b0-d934b8434780","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-a63d8b"} {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e215498-a4c7-419c-82b0-d934b8434780","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e215498-a4c7-419c-82b0-d934b8434780","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5e215498-a4c7-419c-82b0-d934b8434780","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e215498-a4c7-419c-82b0-d934b8434780","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e215498-a4c7-419c-82b0-d934b8434780","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ebf3c047-3a88-449f-ad40-3a4171dd5ec9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:44490","PortSpecifier":{"PortValue":44490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ebf3c047-3a88-449f-ad40-3a4171dd5ec9","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ebf3c047-3a88-449f-ad40-3a4171dd5ec9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:44490","PortSpecifier":{"PortValue":44490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783720926,"nanos":726293485},"http":{"id":"ebf3c047-3a88-449f-ad40-3a4171dd5ec9","method":"GET","headers":{":authority":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ebf3c047-3a88-449f-ad40-3a4171dd5ec9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1ZsEZCsuGve8w6A8L_1w2isbqRbnnWAvcvGAMQE4fwSLT5XsiCkIcz96Q3FVQ"} {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ebf3c047-3a88-449f-ad40-3a4171dd5ec9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f937a7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1ZsEZCsuGve8w6A8L_1w2isbqRbnnWAvcvGAMQE4fwSLT5XsiCkIcz96Q3FVQ\"}"} {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ebf3c047-3a88-449f-ad40-3a4171dd5ec9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f937a7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e229b96d-5ec0-4622-a698-66a1297a091a","keyName":"e2e-sub-iso-8323fd","subscription":"e2e-b-only-a63d8b","tenant":"e2e-shared-b-f937a7","userId":"e229b96d-5ec0-4622-a698-66a1297a091a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ebf3c047-3a88-449f-ad40-3a4171dd5ec9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebf3c047-3a88-449f-ad40-3a4171dd5ec9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebf3c047-3a88-449f-ad40-3a4171dd5ec9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ebf3c047-3a88-449f-ad40-3a4171dd5ec9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f937a7/sub-test-model-f937a7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ebf3c047-3a88-449f-ad40-3a4171dd5ec9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebf3c047-3a88-449f-ad40-3a4171dd5ec9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebf3c047-3a88-449f-ad40-3a4171dd5ec9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ebf3c047-3a88-449f-ad40-3a4171dd5ec9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-a63d8b"} {"level":"info","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ebf3c047-3a88-449f-ad40-3a4171dd5ec9","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T22:02:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ebf3c047-3a88-449f-ad40-3a4171dd5ec9","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3cf00390-2e59-4a1b-b85d-9f0a4bd0521f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:42128","PortSpecifier":{"PortValue":42128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3cf00390-2e59-4a1b-b85d-9f0a4bd0521f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3cf00390-2e59-4a1b-b85d-9f0a4bd0521f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:42128","PortSpecifier":{"PortValue":42128}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783720936,"nanos":854798243},"http":{"id":"3cf00390-2e59-4a1b-b85d-9f0a4bd0521f","method":"POST","headers":{":authority":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3cf00390-2e59-4a1b-b85d-9f0a4bd0521f","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3cf00390-2e59-4a1b-b85d-9f0a4bd0521f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"]}} {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3cf00390-2e59-4a1b-b85d-9f0a4bd0521f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4e453737804b21837c343736e1d1641468db9507ae64fabac5d82ca79ddf2f34"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3cf00390-2e59-4a1b-b85d-9f0a4bd0521f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3cf00390-2e59-4a1b-b85d-9f0a4bd0521f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3cf00390-2e59-4a1b-b85d-9f0a4bd0521f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-22d37c/sub-test-model-22d37c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3cf00390-2e59-4a1b-b85d-9f0a4bd0521f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3cf00390-2e59-4a1b-b85d-9f0a4bd0521f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3cf00390-2e59-4a1b-b85d-9f0a4bd0521f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3cf00390-2e59-4a1b-b85d-9f0a4bd0521f","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3cf00390-2e59-4a1b-b85d-9f0a4bd0521f","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77527956-f14b-4a3f-974b-9c0156d82db2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:45052","PortSpecifier":{"PortValue":45052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"77527956-f14b-4a3f-974b-9c0156d82db2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77527956-f14b-4a3f-974b-9c0156d82db2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:45052","PortSpecifier":{"PortValue":45052}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783720936,"nanos":892627399},"http":{"id":"77527956-f14b-4a3f-974b-9c0156d82db2","method":"POST","headers":{":authority":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"77527956-f14b-4a3f-974b-9c0156d82db2","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"77527956-f14b-4a3f-974b-9c0156d82db2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"]}} {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"77527956-f14b-4a3f-974b-9c0156d82db2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4ee6ccd193f7699d3d2ac575d1fc0bc0af1de9d76c954edd7379fef966bdf49b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77527956-f14b-4a3f-974b-9c0156d82db2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77527956-f14b-4a3f-974b-9c0156d82db2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77527956-f14b-4a3f-974b-9c0156d82db2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f937a7/sub-test-model-f937a7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"77527956-f14b-4a3f-974b-9c0156d82db2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77527956-f14b-4a3f-974b-9c0156d82db2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77527956-f14b-4a3f-974b-9c0156d82db2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77527956-f14b-4a3f-974b-9c0156d82db2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77527956-f14b-4a3f-974b-9c0156d82db2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d9f2d19-4e7e-427c-80e6-6fe4e25b03c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:42132","PortSpecifier":{"PortValue":42132}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d9f2d19-4e7e-427c-80e6-6fe4e25b03c1","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d9f2d19-4e7e-427c-80e6-6fe4e25b03c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:42132","PortSpecifier":{"PortValue":42132}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783720936,"nanos":925981976},"http":{"id":"3d9f2d19-4e7e-427c-80e6-6fe4e25b03c1","method":"POST","headers":{":authority":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d9f2d19-4e7e-427c-80e6-6fe4e25b03c1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Gior9ezvAjIznIcD_Unh6sEziPIz3ZTticeqGMqjiA8LmioAqvxSfKijSDZF"} {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3d9f2d19-4e7e-427c-80e6-6fe4e25b03c1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-22d37c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Gior9ezvAjIznIcD_Unh6sEziPIz3ZTticeqGMqjiA8LmioAqvxSfKijSDZF\"}"} {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3d9f2d19-4e7e-427c-80e6-6fe4e25b03c1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-22d37c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"271e94f4-e44c-4083-8727-7946255260f2","keyName":"e2e-sub-iso-029428","subscription":"e2e-shared-sub-c625f0","tenant":"e2e-shared-a-22d37c","userId":"271e94f4-e44c-4083-8727-7946255260f2","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d9f2d19-4e7e-427c-80e6-6fe4e25b03c1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d9f2d19-4e7e-427c-80e6-6fe4e25b03c1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d9f2d19-4e7e-427c-80e6-6fe4e25b03c1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d9f2d19-4e7e-427c-80e6-6fe4e25b03c1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-22d37c/sub-test-model-22d37c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d9f2d19-4e7e-427c-80e6-6fe4e25b03c1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-c625f0"} {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d9f2d19-4e7e-427c-80e6-6fe4e25b03c1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d9f2d19-4e7e-427c-80e6-6fe4e25b03c1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3d9f2d19-4e7e-427c-80e6-6fe4e25b03c1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d9f2d19-4e7e-427c-80e6-6fe4e25b03c1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d9f2d19-4e7e-427c-80e6-6fe4e25b03c1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f8ccfd6-4426-478b-94e3-8e924451cfb3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:45064","PortSpecifier":{"PortValue":45064}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3f8ccfd6-4426-478b-94e3-8e924451cfb3","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f8ccfd6-4426-478b-94e3-8e924451cfb3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:45064","PortSpecifier":{"PortValue":45064}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783720936,"nanos":957522921},"http":{"id":"3f8ccfd6-4426-478b-94e3-8e924451cfb3","method":"POST","headers":{":authority":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3f8ccfd6-4426-478b-94e3-8e924451cfb3","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5DwXHQxUVfvgM9Sy_UQSiJYraEgGf9icVyN1ZH9dzCniUTGY4AmuuWHwCH6p"} {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3f8ccfd6-4426-478b-94e3-8e924451cfb3","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f937a7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5DwXHQxUVfvgM9Sy_UQSiJYraEgGf9icVyN1ZH9dzCniUTGY4AmuuWHwCH6p\"}"} {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3f8ccfd6-4426-478b-94e3-8e924451cfb3","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f937a7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"677884d9-5214-46fa-9102-4f56ab66bcae","keyName":"e2e-sub-iso-bd0437","subscription":"e2e-shared-sub-c625f0","tenant":"e2e-shared-b-f937a7","userId":"677884d9-5214-46fa-9102-4f56ab66bcae","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3f8ccfd6-4426-478b-94e3-8e924451cfb3","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f8ccfd6-4426-478b-94e3-8e924451cfb3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f8ccfd6-4426-478b-94e3-8e924451cfb3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f8ccfd6-4426-478b-94e3-8e924451cfb3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f937a7/sub-test-model-f937a7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3f8ccfd6-4426-478b-94e3-8e924451cfb3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f8ccfd6-4426-478b-94e3-8e924451cfb3","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f8ccfd6-4426-478b-94e3-8e924451cfb3","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-c625f0"} {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f8ccfd6-4426-478b-94e3-8e924451cfb3","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f8ccfd6-4426-478b-94e3-8e924451cfb3","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T22:02:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f8ccfd6-4426-478b-94e3-8e924451cfb3","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T22:02:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e693bd26823fdefb83bf6f222b1c52f56205c1a47a563dc9c6b2730a36473d69"} {"level":"info","ts":"2026-07-10T22:02:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d65bcf1818dae3ff513a3a57757dca3ed355ede6efab817c980153a481269a51"} {"level":"info","ts":"2026-07-10T22:02:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f42882d64e682f7759994cf5c2913c57623ffb2ac8efcff5325c53cfb5e0ba73"} {"level":"info","ts":"2026-07-10T22:02:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a4e685533883e569f21a3e2ef47bdbe0add4c5dd46fc41fb94caab06b6c5d11"} {"level":"info","ts":"2026-07-10T22:02:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a63fb7af3e3718015293633486c562daef7cc4337689b27fbf7ffa6b3f776d63"} {"level":"info","ts":"2026-07-10T22:02:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aeebae755cd095c6827043f10d41b48c607d1c6d69ad5fe477515df687e651a1"} {"level":"info","ts":"2026-07-10T22:02:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c34c2e92b1fce89c1d1df8c707e29ce32194d17e1f44ad3664ebbae385195301"} {"level":"info","ts":"2026-07-10T22:02:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac9e8c334177ccdf37fa5ad2f2914d41a05fc99af500451a7ea0136965e46be2"} {"level":"info","ts":"2026-07-10T22:02:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bda1c1533fa75ff1ea88b4750698dba0346a786ebe692608c1f97c1be2caae9c"} {"level":"info","ts":"2026-07-10T22:02:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/195997a91a46b5ec113f0f20b17226d82741fe78c4a3557687b027633a5f4d2b"} {"level":"info","ts":"2026-07-10T22:02:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/49683ac97d758f513ba7f5aa0772e802039c9ad00657d329c55a13fd4e375aec"} {"level":"info","ts":"2026-07-10T22:02:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/45f64b2419a3d0ab484323156546c763ec33bc7b02fd80c5c83f2d95bb2c4c17"} {"level":"info","ts":"2026-07-10T22:02:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/11d4c922e2e566988feeadcfb5eebad71d8bcce6982f5b063b1fce21f90230ad"} {"level":"info","ts":"2026-07-10T22:02:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5df678b42d7464f7e38a5c14f3d320e7d85bd68748dd30bab2f956f01b24b0a"} {"level":"info","ts":"2026-07-10T22:02:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba7a5dd4d6a8c889bb377fb34a7ef3c29840e446c9e67e40cf935665383bd38d"} {"level":"info","ts":"2026-07-10T22:02:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/91345df4e3f3a5633748375f2592ebf43b1ea37403a23d2135e0319df93279ce"} {"level":"debug","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6842bd97cb50c4cb14dc9b956b8600ba1eb51a6a1b472ae5c99f10f9cf9d83e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6842bd97cb50c4cb14dc9b956b8600ba1eb51a6a1b472ae5c99f10f9cf9d83e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6842bd97cb50c4cb14dc9b956b8600ba1eb51a6a1b472ae5c99f10f9cf9d83e"} {"level":"debug","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6842bd97cb50c4cb14dc9b956b8600ba1eb51a6a1b472ae5c99f10f9cf9d83e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6842bd97cb50c4cb14dc9b956b8600ba1eb51a6a1b472ae5c99f10f9cf9d83e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6842bd97cb50c4cb14dc9b956b8600ba1eb51a6a1b472ae5c99f10f9cf9d83e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6842bd97cb50c4cb14dc9b956b8600ba1eb51a6a1b472ae5c99f10f9cf9d83e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6842bd97cb50c4cb14dc9b956b8600ba1eb51a6a1b472ae5c99f10f9cf9d83e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6842bd97cb50c4cb14dc9b956b8600ba1eb51a6a1b472ae5c99f10f9cf9d83e"} {"level":"info","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6842bd97cb50c4cb14dc9b956b8600ba1eb51a6a1b472ae5c99f10f9cf9d83e"} {"level":"info","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6842bd97cb50c4cb14dc9b956b8600ba1eb51a6a1b472ae5c99f10f9cf9d83e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6842bd97cb50c4cb14dc9b956b8600ba1eb51a6a1b472ae5c99f10f9cf9d83e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6842bd97cb50c4cb14dc9b956b8600ba1eb51a6a1b472ae5c99f10f9cf9d83e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6842bd97cb50c4cb14dc9b956b8600ba1eb51a6a1b472ae5c99f10f9cf9d83e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6842bd97cb50c4cb14dc9b956b8600ba1eb51a6a1b472ae5c99f10f9cf9d83e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6842bd97cb50c4cb14dc9b956b8600ba1eb51a6a1b472ae5c99f10f9cf9d83e"} {"level":"debug","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6842bd97cb50c4cb14dc9b956b8600ba1eb51a6a1b472ae5c99f10f9cf9d83e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6842bd97cb50c4cb14dc9b956b8600ba1eb51a6a1b472ae5c99f10f9cf9d83e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6842bd97cb50c4cb14dc9b956b8600ba1eb51a6a1b472ae5c99f10f9cf9d83e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6842bd97cb50c4cb14dc9b956b8600ba1eb51a6a1b472ae5c99f10f9cf9d83e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6842bd97cb50c4cb14dc9b956b8600ba1eb51a6a1b472ae5c99f10f9cf9d83e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6842bd97cb50c4cb14dc9b956b8600ba1eb51a6a1b472ae5c99f10f9cf9d83e"} {"level":"debug","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6842bd97cb50c4cb14dc9b956b8600ba1eb51a6a1b472ae5c99f10f9cf9d83e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6842bd97cb50c4cb14dc9b956b8600ba1eb51a6a1b472ae5c99f10f9cf9d83e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6842bd97cb50c4cb14dc9b956b8600ba1eb51a6a1b472ae5c99f10f9cf9d83e"} {"level":"debug","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6842bd97cb50c4cb14dc9b956b8600ba1eb51a6a1b472ae5c99f10f9cf9d83e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6842bd97cb50c4cb14dc9b956b8600ba1eb51a6a1b472ae5c99f10f9cf9d83e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6842bd97cb50c4cb14dc9b956b8600ba1eb51a6a1b472ae5c99f10f9cf9d83e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6842bd97cb50c4cb14dc9b956b8600ba1eb51a6a1b472ae5c99f10f9cf9d83e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6842bd97cb50c4cb14dc9b956b8600ba1eb51a6a1b472ae5c99f10f9cf9d83e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6842bd97cb50c4cb14dc9b956b8600ba1eb51a6a1b472ae5c99f10f9cf9d83e"} {"level":"info","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b6842bd97cb50c4cb14dc9b956b8600ba1eb51a6a1b472ae5c99f10f9cf9d83e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b6842bd97cb50c4cb14dc9b956b8600ba1eb51a6a1b472ae5c99f10f9cf9d83e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1"} {"level":"info","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b6842bd97cb50c4cb14dc9b956b8600ba1eb51a6a1b472ae5c99f10f9cf9d83e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6842bd97cb50c4cb14dc9b956b8600ba1eb51a6a1b472ae5c99f10f9cf9d83e"} {"level":"info","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6842bd97cb50c4cb14dc9b956b8600ba1eb51a6a1b472ae5c99f10f9cf9d83e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1"} {"level":"info","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6842bd97cb50c4cb14dc9b956b8600ba1eb51a6a1b472ae5c99f10f9cf9d83e"} {"level":"error","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1"} {"level":"info","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1"} {"level":"debug","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2145ae6d948330ef6bc37d6cf4d9e071d74d70fdf874ea8dc39abdc4a970a38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1"} {"level":"info","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2145ae6d948330ef6bc37d6cf4d9e071d74d70fdf874ea8dc39abdc4a970a38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2145ae6d948330ef6bc37d6cf4d9e071d74d70fdf874ea8dc39abdc4a970a38"} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2145ae6d948330ef6bc37d6cf4d9e071d74d70fdf874ea8dc39abdc4a970a38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2145ae6d948330ef6bc37d6cf4d9e071d74d70fdf874ea8dc39abdc4a970a38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2145ae6d948330ef6bc37d6cf4d9e071d74d70fdf874ea8dc39abdc4a970a38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1"} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2145ae6d948330ef6bc37d6cf4d9e071d74d70fdf874ea8dc39abdc4a970a38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2145ae6d948330ef6bc37d6cf4d9e071d74d70fdf874ea8dc39abdc4a970a38"} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2145ae6d948330ef6bc37d6cf4d9e071d74d70fdf874ea8dc39abdc4a970a38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c95e55f2a0d3597b29ebca35af78254092516fb60e5d615d869f9f6d564d7aef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1"} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c95e55f2a0d3597b29ebca35af78254092516fb60e5d615d869f9f6d564d7aef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b2145ae6d948330ef6bc37d6cf4d9e071d74d70fdf874ea8dc39abdc4a970a38","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b2145ae6d948330ef6bc37d6cf4d9e071d74d70fdf874ea8dc39abdc4a970a38"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c95e55f2a0d3597b29ebca35af78254092516fb60e5d615d869f9f6d564d7aef"} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b2145ae6d948330ef6bc37d6cf4d9e071d74d70fdf874ea8dc39abdc4a970a38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2145ae6d948330ef6bc37d6cf4d9e071d74d70fdf874ea8dc39abdc4a970a38"} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c95e55f2a0d3597b29ebca35af78254092516fb60e5d615d869f9f6d564d7aef"} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c95e55f2a0d3597b29ebca35af78254092516fb60e5d615d869f9f6d564d7aef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c95e55f2a0d3597b29ebca35af78254092516fb60e5d615d869f9f6d564d7aef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2145ae6d948330ef6bc37d6cf4d9e071d74d70fdf874ea8dc39abdc4a970a38"} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c95e55f2a0d3597b29ebca35af78254092516fb60e5d615d869f9f6d564d7aef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2145ae6d948330ef6bc37d6cf4d9e071d74d70fdf874ea8dc39abdc4a970a38","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1"} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c95e55f2a0d3597b29ebca35af78254092516fb60e5d615d869f9f6d564d7aef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c95e55f2a0d3597b29ebca35af78254092516fb60e5d615d869f9f6d564d7aef"} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c95e55f2a0d3597b29ebca35af78254092516fb60e5d615d869f9f6d564d7aef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c95e55f2a0d3597b29ebca35af78254092516fb60e5d615d869f9f6d564d7aef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c95e55f2a0d3597b29ebca35af78254092516fb60e5d615d869f9f6d564d7aef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1"} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c95e55f2a0d3597b29ebca35af78254092516fb60e5d615d869f9f6d564d7aef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c95e55f2a0d3597b29ebca35af78254092516fb60e5d615d869f9f6d564d7aef"} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c95e55f2a0d3597b29ebca35af78254092516fb60e5d615d869f9f6d564d7aef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c95e55f2a0d3597b29ebca35af78254092516fb60e5d615d869f9f6d564d7aef"} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c95e55f2a0d3597b29ebca35af78254092516fb60e5d615d869f9f6d564d7aef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1"} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c95e55f2a0d3597b29ebca35af78254092516fb60e5d615d869f9f6d564d7aef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c95e55f2a0d3597b29ebca35af78254092516fb60e5d615d869f9f6d564d7aef"} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c95e55f2a0d3597b29ebca35af78254092516fb60e5d615d869f9f6d564d7aef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c95e55f2a0d3597b29ebca35af78254092516fb60e5d615d869f9f6d564d7aef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c95e55f2a0d3597b29ebca35af78254092516fb60e5d615d869f9f6d564d7aef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1"} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c95e55f2a0d3597b29ebca35af78254092516fb60e5d615d869f9f6d564d7aef","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1"} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c95e55f2a0d3597b29ebca35af78254092516fb60e5d615d869f9f6d564d7aef"} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1"} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1"} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1"} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1"} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1"} {"level":"error","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1"} {"level":"error","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1"} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1"} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1"} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7abad201ece8b77ccbaa14fce80032e1899146059f1b5ae96a17993a8ec0ac3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7abad201ece8b77ccbaa14fce80032e1899146059f1b5ae96a17993a8ec0ac3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7abad201ece8b77ccbaa14fce80032e1899146059f1b5ae96a17993a8ec0ac3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7abad201ece8b77ccbaa14fce80032e1899146059f1b5ae96a17993a8ec0ac3","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7abad201ece8b77ccbaa14fce80032e1899146059f1b5ae96a17993a8ec0ac3"} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7abad201ece8b77ccbaa14fce80032e1899146059f1b5ae96a17993a8ec0ac3"} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7abad201ece8b77ccbaa14fce80032e1899146059f1b5ae96a17993a8ec0ac3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7abad201ece8b77ccbaa14fce80032e1899146059f1b5ae96a17993a8ec0ac3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7abad201ece8b77ccbaa14fce80032e1899146059f1b5ae96a17993a8ec0ac3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1"} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7abad201ece8b77ccbaa14fce80032e1899146059f1b5ae96a17993a8ec0ac3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7abad201ece8b77ccbaa14fce80032e1899146059f1b5ae96a17993a8ec0ac3"} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7abad201ece8b77ccbaa14fce80032e1899146059f1b5ae96a17993a8ec0ac3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7abad201ece8b77ccbaa14fce80032e1899146059f1b5ae96a17993a8ec0ac3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7abad201ece8b77ccbaa14fce80032e1899146059f1b5ae96a17993a8ec0ac3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7abad201ece8b77ccbaa14fce80032e1899146059f1b5ae96a17993a8ec0ac3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1"} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7abad201ece8b77ccbaa14fce80032e1899146059f1b5ae96a17993a8ec0ac3"} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7abad201ece8b77ccbaa14fce80032e1899146059f1b5ae96a17993a8ec0ac3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a"} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1"} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a"} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1"} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a"} {"level":"info","ts":"2026-07-10T22:02:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52ab1d2b607f92203a7a2f83c7a1f5c1fb8f8235fcbecf92f7bad955ba1493de"} {"level":"info","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52ab1d2b607f92203a7a2f83c7a1f5c1fb8f8235fcbecf92f7bad955ba1493de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52ab1d2b607f92203a7a2f83c7a1f5c1fb8f8235fcbecf92f7bad955ba1493de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1"} {"level":"info","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a"} {"level":"info","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52ab1d2b607f92203a7a2f83c7a1f5c1fb8f8235fcbecf92f7bad955ba1493de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52ab1d2b607f92203a7a2f83c7a1f5c1fb8f8235fcbecf92f7bad955ba1493de"} {"level":"info","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52ab1d2b607f92203a7a2f83c7a1f5c1fb8f8235fcbecf92f7bad955ba1493de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a"} {"level":"info","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a"} {"level":"debug","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a"} {"level":"info","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a"} {"level":"debug","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a"} {"level":"info","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a"} {"level":"debug","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a"} {"level":"info","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a"} {"level":"debug","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:02:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:02:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a"} {"level":"info","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a"} {"level":"info","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:02:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:02:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a"} {"level":"error","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:02:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09305b8770e2b7363f48da6696fa1b173c4c96e28670bbcced045893be06a905","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09305b8770e2b7363f48da6696fa1b173c4c96e28670bbcced045893be06a905","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09305b8770e2b7363f48da6696fa1b173c4c96e28670bbcced045893be06a905","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09305b8770e2b7363f48da6696fa1b173c4c96e28670bbcced045893be06a905","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09305b8770e2b7363f48da6696fa1b173c4c96e28670bbcced045893be06a905"} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09305b8770e2b7363f48da6696fa1b173c4c96e28670bbcced045893be06a905","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09305b8770e2b7363f48da6696fa1b173c4c96e28670bbcced045893be06a905"} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09305b8770e2b7363f48da6696fa1b173c4c96e28670bbcced045893be06a905","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09305b8770e2b7363f48da6696fa1b173c4c96e28670bbcced045893be06a905"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09305b8770e2b7363f48da6696fa1b173c4c96e28670bbcced045893be06a905","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09305b8770e2b7363f48da6696fa1b173c4c96e28670bbcced045893be06a905","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09305b8770e2b7363f48da6696fa1b173c4c96e28670bbcced045893be06a905","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f48b631e1731c40d64a343950b391f81f57f82d796628051c9bc0111caf0b827","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09305b8770e2b7363f48da6696fa1b173c4c96e28670bbcced045893be06a905"} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f48b631e1731c40d64a343950b391f81f57f82d796628051c9bc0111caf0b827","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09305b8770e2b7363f48da6696fa1b173c4c96e28670bbcced045893be06a905","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09305b8770e2b7363f48da6696fa1b173c4c96e28670bbcced045893be06a905"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09305b8770e2b7363f48da6696fa1b173c4c96e28670bbcced045893be06a905","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f48b631e1731c40d64a343950b391f81f57f82d796628051c9bc0111caf0b827","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f48b631e1731c40d64a343950b391f81f57f82d796628051c9bc0111caf0b827"} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f48b631e1731c40d64a343950b391f81f57f82d796628051c9bc0111caf0b827","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09305b8770e2b7363f48da6696fa1b173c4c96e28670bbcced045893be06a905","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09305b8770e2b7363f48da6696fa1b173c4c96e28670bbcced045893be06a905"} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09305b8770e2b7363f48da6696fa1b173c4c96e28670bbcced045893be06a905","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f48b631e1731c40d64a343950b391f81f57f82d796628051c9bc0111caf0b827","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09305b8770e2b7363f48da6696fa1b173c4c96e28670bbcced045893be06a905","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09305b8770e2b7363f48da6696fa1b173c4c96e28670bbcced045893be06a905"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f48b631e1731c40d64a343950b391f81f57f82d796628051c9bc0111caf0b827"} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09305b8770e2b7363f48da6696fa1b173c4c96e28670bbcced045893be06a905","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09305b8770e2b7363f48da6696fa1b173c4c96e28670bbcced045893be06a905","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09305b8770e2b7363f48da6696fa1b173c4c96e28670bbcced045893be06a905","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09305b8770e2b7363f48da6696fa1b173c4c96e28670bbcced045893be06a905","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f48b631e1731c40d64a343950b391f81f57f82d796628051c9bc0111caf0b827","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f48b631e1731c40d64a343950b391f81f57f82d796628051c9bc0111caf0b827"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09305b8770e2b7363f48da6696fa1b173c4c96e28670bbcced045893be06a905"} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f48b631e1731c40d64a343950b391f81f57f82d796628051c9bc0111caf0b827","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09305b8770e2b7363f48da6696fa1b173c4c96e28670bbcced045893be06a905","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f48b631e1731c40d64a343950b391f81f57f82d796628051c9bc0111caf0b827","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09305b8770e2b7363f48da6696fa1b173c4c96e28670bbcced045893be06a905"} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09305b8770e2b7363f48da6696fa1b173c4c96e28670bbcced045893be06a905","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09305b8770e2b7363f48da6696fa1b173c4c96e28670bbcced045893be06a905"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09305b8770e2b7363f48da6696fa1b173c4c96e28670bbcced045893be06a905","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09305b8770e2b7363f48da6696fa1b173c4c96e28670bbcced045893be06a905","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f48b631e1731c40d64a343950b391f81f57f82d796628051c9bc0111caf0b827"} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09305b8770e2b7363f48da6696fa1b173c4c96e28670bbcced045893be06a905"} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"654669fd0648c35d66ccb0b75e548d02899a1de3dd880830432f0c40444ed795","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"654669fd0648c35d66ccb0b75e548d02899a1de3dd880830432f0c40444ed795","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"654669fd0648c35d66ccb0b75e548d02899a1de3dd880830432f0c40444ed795","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"654669fd0648c35d66ccb0b75e548d02899a1de3dd880830432f0c40444ed795","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/654669fd0648c35d66ccb0b75e548d02899a1de3dd880830432f0c40444ed795"} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"654669fd0648c35d66ccb0b75e548d02899a1de3dd880830432f0c40444ed795","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/654669fd0648c35d66ccb0b75e548d02899a1de3dd880830432f0c40444ed795"} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"654669fd0648c35d66ccb0b75e548d02899a1de3dd880830432f0c40444ed795","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["654669fd0648c35d66ccb0b75e548d02899a1de3dd880830432f0c40444ed795"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"654669fd0648c35d66ccb0b75e548d02899a1de3dd880830432f0c40444ed795","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"654669fd0648c35d66ccb0b75e548d02899a1de3dd880830432f0c40444ed795","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"654669fd0648c35d66ccb0b75e548d02899a1de3dd880830432f0c40444ed795","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2daba03eb9fd8fa7f81f9df02c2db2f0df7e27e9f236a2a266d0bef30e958387","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/654669fd0648c35d66ccb0b75e548d02899a1de3dd880830432f0c40444ed795"} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2daba03eb9fd8fa7f81f9df02c2db2f0df7e27e9f236a2a266d0bef30e958387","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"654669fd0648c35d66ccb0b75e548d02899a1de3dd880830432f0c40444ed795","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["654669fd0648c35d66ccb0b75e548d02899a1de3dd880830432f0c40444ed795"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"654669fd0648c35d66ccb0b75e548d02899a1de3dd880830432f0c40444ed795","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2daba03eb9fd8fa7f81f9df02c2db2f0df7e27e9f236a2a266d0bef30e958387","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2daba03eb9fd8fa7f81f9df02c2db2f0df7e27e9f236a2a266d0bef30e958387"} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2daba03eb9fd8fa7f81f9df02c2db2f0df7e27e9f236a2a266d0bef30e958387","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"654669fd0648c35d66ccb0b75e548d02899a1de3dd880830432f0c40444ed795","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/654669fd0648c35d66ccb0b75e548d02899a1de3dd880830432f0c40444ed795"} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"654669fd0648c35d66ccb0b75e548d02899a1de3dd880830432f0c40444ed795","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2daba03eb9fd8fa7f81f9df02c2db2f0df7e27e9f236a2a266d0bef30e958387","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"654669fd0648c35d66ccb0b75e548d02899a1de3dd880830432f0c40444ed795","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["654669fd0648c35d66ccb0b75e548d02899a1de3dd880830432f0c40444ed795"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"654669fd0648c35d66ccb0b75e548d02899a1de3dd880830432f0c40444ed795","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"654669fd0648c35d66ccb0b75e548d02899a1de3dd880830432f0c40444ed795","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["654669fd0648c35d66ccb0b75e548d02899a1de3dd880830432f0c40444ed795"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2daba03eb9fd8fa7f81f9df02c2db2f0df7e27e9f236a2a266d0bef30e958387"} {"level":"error","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"654669fd0648c35d66ccb0b75e548d02899a1de3dd880830432f0c40444ed795","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"654669fd0648c35d66ccb0b75e548d02899a1de3dd880830432f0c40444ed795\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2daba03eb9fd8fa7f81f9df02c2db2f0df7e27e9f236a2a266d0bef30e958387","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2daba03eb9fd8fa7f81f9df02c2db2f0df7e27e9f236a2a266d0bef30e958387"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2daba03eb9fd8fa7f81f9df02c2db2f0df7e27e9f236a2a266d0bef30e958387","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a96f65ef97b868da9b61e5200626a3f9596f356385b001ba035ee81a660a0e46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/654669fd0648c35d66ccb0b75e548d02899a1de3dd880830432f0c40444ed795"} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a96f65ef97b868da9b61e5200626a3f9596f356385b001ba035ee81a660a0e46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"654669fd0648c35d66ccb0b75e548d02899a1de3dd880830432f0c40444ed795","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2daba03eb9fd8fa7f81f9df02c2db2f0df7e27e9f236a2a266d0bef30e958387","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a96f65ef97b868da9b61e5200626a3f9596f356385b001ba035ee81a660a0e46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a96f65ef97b868da9b61e5200626a3f9596f356385b001ba035ee81a660a0e46"} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a96f65ef97b868da9b61e5200626a3f9596f356385b001ba035ee81a660a0e46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a96f65ef97b868da9b61e5200626a3f9596f356385b001ba035ee81a660a0e46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a96f65ef97b868da9b61e5200626a3f9596f356385b001ba035ee81a660a0e46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a96f65ef97b868da9b61e5200626a3f9596f356385b001ba035ee81a660a0e46","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a96f65ef97b868da9b61e5200626a3f9596f356385b001ba035ee81a660a0e46\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a96f65ef97b868da9b61e5200626a3f9596f356385b001ba035ee81a660a0e46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a96f65ef97b868da9b61e5200626a3f9596f356385b001ba035ee81a660a0e46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2daba03eb9fd8fa7f81f9df02c2db2f0df7e27e9f236a2a266d0bef30e958387"} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a96f65ef97b868da9b61e5200626a3f9596f356385b001ba035ee81a660a0e46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a96f65ef97b868da9b61e5200626a3f9596f356385b001ba035ee81a660a0e46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a96f65ef97b868da9b61e5200626a3f9596f356385b001ba035ee81a660a0e46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a96f65ef97b868da9b61e5200626a3f9596f356385b001ba035ee81a660a0e46"} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a96f65ef97b868da9b61e5200626a3f9596f356385b001ba035ee81a660a0e46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a96f65ef97b868da9b61e5200626a3f9596f356385b001ba035ee81a660a0e46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a96f65ef97b868da9b61e5200626a3f9596f356385b001ba035ee81a660a0e46","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a96f65ef97b868da9b61e5200626a3f9596f356385b001ba035ee81a660a0e46\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a96f65ef97b868da9b61e5200626a3f9596f356385b001ba035ee81a660a0e46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a96f65ef97b868da9b61e5200626a3f9596f356385b001ba035ee81a660a0e46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:03:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a96f65ef97b868da9b61e5200626a3f9596f356385b001ba035ee81a660a0e46"} {"level":"debug","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:03:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c"} {"level":"debug","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a96f65ef97b868da9b61e5200626a3f9596f356385b001ba035ee81a660a0e46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ff2f90123fb6e8e8dd9356c8515129ed7643077c95efbd3b5992e9dd7995417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:03:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:03:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a96f65ef97b868da9b61e5200626a3f9596f356385b001ba035ee81a660a0e46"} {"level":"info","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ff2f90123fb6e8e8dd9356c8515129ed7643077c95efbd3b5992e9dd7995417","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ff2f90123fb6e8e8dd9356c8515129ed7643077c95efbd3b5992e9dd7995417","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ff2f90123fb6e8e8dd9356c8515129ed7643077c95efbd3b5992e9dd7995417","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c"} {"level":"debug","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ff2f90123fb6e8e8dd9356c8515129ed7643077c95efbd3b5992e9dd7995417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:03:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:03:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ff2f90123fb6e8e8dd9356c8515129ed7643077c95efbd3b5992e9dd7995417"} {"level":"info","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ff2f90123fb6e8e8dd9356c8515129ed7643077c95efbd3b5992e9dd7995417","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ff2f90123fb6e8e8dd9356c8515129ed7643077c95efbd3b5992e9dd7995417","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ff2f90123fb6e8e8dd9356c8515129ed7643077c95efbd3b5992e9dd7995417"} {"level":"debug","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ff2f90123fb6e8e8dd9356c8515129ed7643077c95efbd3b5992e9dd7995417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:03:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:03:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ff2f90123fb6e8e8dd9356c8515129ed7643077c95efbd3b5992e9dd7995417"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ff2f90123fb6e8e8dd9356c8515129ed7643077c95efbd3b5992e9dd7995417","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54a372ee49ecf297845253f7e788f971948e8e5436c2ddf473bd912ed8d0ea4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:03:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:03:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54a372ee49ecf297845253f7e788f971948e8e5436c2ddf473bd912ed8d0ea4c"} {"level":"info","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54a372ee49ecf297845253f7e788f971948e8e5436c2ddf473bd912ed8d0ea4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ff2f90123fb6e8e8dd9356c8515129ed7643077c95efbd3b5992e9dd7995417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:03:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:03:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ff2f90123fb6e8e8dd9356c8515129ed7643077c95efbd3b5992e9dd7995417","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54a372ee49ecf297845253f7e788f971948e8e5436c2ddf473bd912ed8d0ea4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:03:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:03:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54a372ee49ecf297845253f7e788f971948e8e5436c2ddf473bd912ed8d0ea4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ff2f90123fb6e8e8dd9356c8515129ed7643077c95efbd3b5992e9dd7995417"} {"level":"info","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54a372ee49ecf297845253f7e788f971948e8e5436c2ddf473bd912ed8d0ea4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ff2f90123fb6e8e8dd9356c8515129ed7643077c95efbd3b5992e9dd7995417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:03:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:03:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ff2f90123fb6e8e8dd9356c8515129ed7643077c95efbd3b5992e9dd7995417"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54a372ee49ecf297845253f7e788f971948e8e5436c2ddf473bd912ed8d0ea4c"} {"level":"info","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ff2f90123fb6e8e8dd9356c8515129ed7643077c95efbd3b5992e9dd7995417","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a96f65ef97b868da9b61e5200626a3f9596f356385b001ba035ee81a660a0e46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:03:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:03:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a96f65ef97b868da9b61e5200626a3f9596f356385b001ba035ee81a660a0e46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a96f65ef97b868da9b61e5200626a3f9596f356385b001ba035ee81a660a0e46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54a372ee49ecf297845253f7e788f971948e8e5436c2ddf473bd912ed8d0ea4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ff2f90123fb6e8e8dd9356c8515129ed7643077c95efbd3b5992e9dd7995417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:03:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:03:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ff2f90123fb6e8e8dd9356c8515129ed7643077c95efbd3b5992e9dd7995417"} {"level":"info","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ff2f90123fb6e8e8dd9356c8515129ed7643077c95efbd3b5992e9dd7995417","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:03:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:03:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54a372ee49ecf297845253f7e788f971948e8e5436c2ddf473bd912ed8d0ea4c"} {"level":"info","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a96f65ef97b868da9b61e5200626a3f9596f356385b001ba035ee81a660a0e46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:03:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:03:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a96f65ef97b868da9b61e5200626a3f9596f356385b001ba035ee81a660a0e46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ff2f90123fb6e8e8dd9356c8515129ed7643077c95efbd3b5992e9dd7995417","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:03:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:03:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ff2f90123fb6e8e8dd9356c8515129ed7643077c95efbd3b5992e9dd7995417"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a96f65ef97b868da9b61e5200626a3f9596f356385b001ba035ee81a660a0e46"} {"level":"info","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ff2f90123fb6e8e8dd9356c8515129ed7643077c95efbd3b5992e9dd7995417","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a96f65ef97b868da9b61e5200626a3f9596f356385b001ba035ee81a660a0e46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:03:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:03:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a96f65ef97b868da9b61e5200626a3f9596f356385b001ba035ee81a660a0e46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ff2f90123fb6e8e8dd9356c8515129ed7643077c95efbd3b5992e9dd7995417"} {"level":"info","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a96f65ef97b868da9b61e5200626a3f9596f356385b001ba035ee81a660a0e46","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ff2f90123fb6e8e8dd9356c8515129ed7643077c95efbd3b5992e9dd7995417","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a96f65ef97b868da9b61e5200626a3f9596f356385b001ba035ee81a660a0e46","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c"} {"level":"info","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a96f65ef97b868da9b61e5200626a3f9596f356385b001ba035ee81a660a0e46"} {"level":"info","ts":"2026-07-10T22:03:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ff2f90123fb6e8e8dd9356c8515129ed7643077c95efbd3b5992e9dd7995417"} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52ab1d2b607f92203a7a2f83c7a1f5c1fb8f8235fcbecf92f7bad955ba1493de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52ab1d2b607f92203a7a2f83c7a1f5c1fb8f8235fcbecf92f7bad955ba1493de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52ab1d2b607f92203a7a2f83c7a1f5c1fb8f8235fcbecf92f7bad955ba1493de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52ab1d2b607f92203a7a2f83c7a1f5c1fb8f8235fcbecf92f7bad955ba1493de","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52ab1d2b607f92203a7a2f83c7a1f5c1fb8f8235fcbecf92f7bad955ba1493de"} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52ab1d2b607f92203a7a2f83c7a1f5c1fb8f8235fcbecf92f7bad955ba1493de","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52ab1d2b607f92203a7a2f83c7a1f5c1fb8f8235fcbecf92f7bad955ba1493de"} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52ab1d2b607f92203a7a2f83c7a1f5c1fb8f8235fcbecf92f7bad955ba1493de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52ab1d2b607f92203a7a2f83c7a1f5c1fb8f8235fcbecf92f7bad955ba1493de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52ab1d2b607f92203a7a2f83c7a1f5c1fb8f8235fcbecf92f7bad955ba1493de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52ab1d2b607f92203a7a2f83c7a1f5c1fb8f8235fcbecf92f7bad955ba1493de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52ab1d2b607f92203a7a2f83c7a1f5c1fb8f8235fcbecf92f7bad955ba1493de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52ab1d2b607f92203a7a2f83c7a1f5c1fb8f8235fcbecf92f7bad955ba1493de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52ab1d2b607f92203a7a2f83c7a1f5c1fb8f8235fcbecf92f7bad955ba1493de","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52ab1d2b607f92203a7a2f83c7a1f5c1fb8f8235fcbecf92f7bad955ba1493de"} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52ab1d2b607f92203a7a2f83c7a1f5c1fb8f8235fcbecf92f7bad955ba1493de","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52ab1d2b607f92203a7a2f83c7a1f5c1fb8f8235fcbecf92f7bad955ba1493de"} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"52ab1d2b607f92203a7a2f83c7a1f5c1fb8f8235fcbecf92f7bad955ba1493de","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["52ab1d2b607f92203a7a2f83c7a1f5c1fb8f8235fcbecf92f7bad955ba1493de"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"52ab1d2b607f92203a7a2f83c7a1f5c1fb8f8235fcbecf92f7bad955ba1493de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"52ab1d2b607f92203a7a2f83c7a1f5c1fb8f8235fcbecf92f7bad955ba1493de","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c"} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/52ab1d2b607f92203a7a2f83c7a1f5c1fb8f8235fcbecf92f7bad955ba1493de"} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c"} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c"} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09305b8770e2b7363f48da6696fa1b173c4c96e28670bbcced045893be06a905","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c"} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09305b8770e2b7363f48da6696fa1b173c4c96e28670bbcced045893be06a905"} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c"} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c"} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54a372ee49ecf297845253f7e788f971948e8e5436c2ddf473bd912ed8d0ea4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54a372ee49ecf297845253f7e788f971948e8e5436c2ddf473bd912ed8d0ea4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54a372ee49ecf297845253f7e788f971948e8e5436c2ddf473bd912ed8d0ea4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54a372ee49ecf297845253f7e788f971948e8e5436c2ddf473bd912ed8d0ea4c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54a372ee49ecf297845253f7e788f971948e8e5436c2ddf473bd912ed8d0ea4c"} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54a372ee49ecf297845253f7e788f971948e8e5436c2ddf473bd912ed8d0ea4c"} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54a372ee49ecf297845253f7e788f971948e8e5436c2ddf473bd912ed8d0ea4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54a372ee49ecf297845253f7e788f971948e8e5436c2ddf473bd912ed8d0ea4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54a372ee49ecf297845253f7e788f971948e8e5436c2ddf473bd912ed8d0ea4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c"} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54a372ee49ecf297845253f7e788f971948e8e5436c2ddf473bd912ed8d0ea4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54a372ee49ecf297845253f7e788f971948e8e5436c2ddf473bd912ed8d0ea4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54a372ee49ecf297845253f7e788f971948e8e5436c2ddf473bd912ed8d0ea4c"} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54a372ee49ecf297845253f7e788f971948e8e5436c2ddf473bd912ed8d0ea4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54a372ee49ecf297845253f7e788f971948e8e5436c2ddf473bd912ed8d0ea4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54a372ee49ecf297845253f7e788f971948e8e5436c2ddf473bd912ed8d0ea4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7abad201ece8b77ccbaa14fce80032e1899146059f1b5ae96a17993a8ec0ac3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c"} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54a372ee49ecf297845253f7e788f971948e8e5436c2ddf473bd912ed8d0ea4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54a372ee49ecf297845253f7e788f971948e8e5436c2ddf473bd912ed8d0ea4c"} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54a372ee49ecf297845253f7e788f971948e8e5436c2ddf473bd912ed8d0ea4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54a372ee49ecf297845253f7e788f971948e8e5436c2ddf473bd912ed8d0ea4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54a372ee49ecf297845253f7e788f971948e8e5436c2ddf473bd912ed8d0ea4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7abad201ece8b77ccbaa14fce80032e1899146059f1b5ae96a17993a8ec0ac3"} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54a372ee49ecf297845253f7e788f971948e8e5436c2ddf473bd912ed8d0ea4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c"} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54a372ee49ecf297845253f7e788f971948e8e5436c2ddf473bd912ed8d0ea4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54a372ee49ecf297845253f7e788f971948e8e5436c2ddf473bd912ed8d0ea4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54a372ee49ecf297845253f7e788f971948e8e5436c2ddf473bd912ed8d0ea4c"} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ee6ccd193f7699d3d2ac575d1fc0bc0af1de9d76c954edd7379fef966bdf49b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"54a372ee49ecf297845253f7e788f971948e8e5436c2ddf473bd912ed8d0ea4c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["54a372ee49ecf297845253f7e788f971948e8e5436c2ddf473bd912ed8d0ea4c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"54a372ee49ecf297845253f7e788f971948e8e5436c2ddf473bd912ed8d0ea4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c"} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"54a372ee49ecf297845253f7e788f971948e8e5436c2ddf473bd912ed8d0ea4c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ee6ccd193f7699d3d2ac575d1fc0bc0af1de9d76c954edd7379fef966bdf49b"} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:03:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/54a372ee49ecf297845253f7e788f971948e8e5436c2ddf473bd912ed8d0ea4c"} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c"} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a96f65ef97b868da9b61e5200626a3f9596f356385b001ba035ee81a660a0e46","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a96f65ef97b868da9b61e5200626a3f9596f356385b001ba035ee81a660a0e46"} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8566544751d451d6562df1499b985efb50b4220a986a2712dde6f4bd1a27898a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b2145ae6d948330ef6bc37d6cf4d9e071d74d70fdf874ea8dc39abdc4a970a38","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8566544751d451d6562df1499b985efb50b4220a986a2712dde6f4bd1a27898a"} {"level":"debug","ts":"2026-07-10T22:03:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e453737804b21837c343736e1d1641468db9507ae64fabac5d82ca79ddf2f34","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b2145ae6d948330ef6bc37d6cf4d9e071d74d70fdf874ea8dc39abdc4a970a38"} {"level":"debug","ts":"2026-07-10T22:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3c2ce3c04cca05a440d30c1000fafd89d41c12cfafd9c0fe53e35d513d976dc7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e453737804b21837c343736e1d1641468db9507ae64fabac5d82ca79ddf2f34"} {"level":"info","ts":"2026-07-10T22:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985"} {"level":"debug","ts":"2026-07-10T22:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b6842bd97cb50c4cb14dc9b956b8600ba1eb51a6a1b472ae5c99f10f9cf9d83e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3c2ce3c04cca05a440d30c1000fafd89d41c12cfafd9c0fe53e35d513d976dc7"} {"level":"debug","ts":"2026-07-10T22:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b6842bd97cb50c4cb14dc9b956b8600ba1eb51a6a1b472ae5c99f10f9cf9d83e"} {"level":"debug","ts":"2026-07-10T22:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c95e55f2a0d3597b29ebca35af78254092516fb60e5d615d869f9f6d564d7aef","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1"} {"level":"info","ts":"2026-07-10T22:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1"} {"level":"debug","ts":"2026-07-10T22:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f92327560fbb6b041809a439f337fe3c4618adf05e786796fae9dc2363b6996","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c95e55f2a0d3597b29ebca35af78254092516fb60e5d615d869f9f6d564d7aef"} {"level":"info","ts":"2026-07-10T22:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f92327560fbb6b041809a439f337fe3c4618adf05e786796fae9dc2363b6996"} {"level":"debug","ts":"2026-07-10T22:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f48b631e1731c40d64a343950b391f81f57f82d796628051c9bc0111caf0b827","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f48b631e1731c40d64a343950b391f81f57f82d796628051c9bc0111caf0b827"} {"level":"debug","ts":"2026-07-10T22:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69830b596606ab5bdce8b430a5c4b2cacc0abc7950fa8ce038a7816dbae27c96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:03:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:03:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69830b596606ab5bdce8b430a5c4b2cacc0abc7950fa8ce038a7816dbae27c96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69830b596606ab5bdce8b430a5c4b2cacc0abc7950fa8ce038a7816dbae27c96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69830b596606ab5bdce8b430a5c4b2cacc0abc7950fa8ce038a7816dbae27c96","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69830b596606ab5bdce8b430a5c4b2cacc0abc7950fa8ce038a7816dbae27c96"} {"level":"debug","ts":"2026-07-10T22:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ff2f90123fb6e8e8dd9356c8515129ed7643077c95efbd3b5992e9dd7995417","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69830b596606ab5bdce8b430a5c4b2cacc0abc7950fa8ce038a7816dbae27c96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:03:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:03:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69830b596606ab5bdce8b430a5c4b2cacc0abc7950fa8ce038a7816dbae27c96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a"} {"level":"info","ts":"2026-07-10T22:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69830b596606ab5bdce8b430a5c4b2cacc0abc7950fa8ce038a7816dbae27c96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8cf15b8af555d6bf30162ba84362b38e75fa80217b8f39ee0d5c2ba6a1fa06f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69830b596606ab5bdce8b430a5c4b2cacc0abc7950fa8ce038a7816dbae27c96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T22:03:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T22:03:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69830b596606ab5bdce8b430a5c4b2cacc0abc7950fa8ce038a7816dbae27c96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69830b596606ab5bdce8b430a5c4b2cacc0abc7950fa8ce038a7816dbae27c96","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69830b596606ab5bdce8b430a5c4b2cacc0abc7950fa8ce038a7816dbae27c96"} {"level":"debug","ts":"2026-07-10T22:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"69830b596606ab5bdce8b430a5c4b2cacc0abc7950fa8ce038a7816dbae27c96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T22:03:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T22:03:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["69830b596606ab5bdce8b430a5c4b2cacc0abc7950fa8ce038a7816dbae27c96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-10T22:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"69830b596606ab5bdce8b430a5c4b2cacc0abc7950fa8ce038a7816dbae27c96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-10T22:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"69830b596606ab5bdce8b430a5c4b2cacc0abc7950fa8ce038a7816dbae27c96","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ff2f90123fb6e8e8dd9356c8515129ed7643077c95efbd3b5992e9dd7995417"} {"level":"debug","ts":"2026-07-10T22:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"654669fd0648c35d66ccb0b75e548d02899a1de3dd880830432f0c40444ed795","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8cf15b8af555d6bf30162ba84362b38e75fa80217b8f39ee0d5c2ba6a1fa06f0"} {"level":"debug","ts":"2026-07-10T22:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2daba03eb9fd8fa7f81f9df02c2db2f0df7e27e9f236a2a266d0bef30e958387","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-10T22:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/69830b596606ab5bdce8b430a5c4b2cacc0abc7950fa8ce038a7816dbae27c96"} {"level":"info","ts":"2026-07-10T22:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/654669fd0648c35d66ccb0b75e548d02899a1de3dd880830432f0c40444ed795"} {"level":"info","ts":"2026-07-10T22:03:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2daba03eb9fd8fa7f81f9df02c2db2f0df7e27e9f236a2a266d0bef30e958387"} {"level":"info","ts":"2026-07-10T22:03:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0dbad750-e65f-4460-bad2-f97b4a17b57e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60546","PortSpecifier":{"PortValue":60546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0dbad750-e65f-4460-bad2-f97b4a17b57e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T22:03:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0dbad750-e65f-4460-bad2-f97b4a17b57e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60546","PortSpecifier":{"PortValue":60546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783721033,"nanos":497972669},"http":{"id":"0dbad750-e65f-4460-bad2-f97b4a17b57e","method":"POST","headers":{":authority":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:03:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0dbad750-e65f-4460-bad2-f97b4a17b57e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T22:03:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0dbad750-e65f-4460-bad2-f97b4a17b57e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"]}} {"level":"debug","ts":"2026-07-10T22:03:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0dbad750-e65f-4460-bad2-f97b4a17b57e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4e453737804b21837c343736e1d1641468db9507ae64fabac5d82ca79ddf2f34"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:03:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0dbad750-e65f-4460-bad2-f97b4a17b57e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:03:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0dbad750-e65f-4460-bad2-f97b4a17b57e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:03:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0dbad750-e65f-4460-bad2-f97b4a17b57e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-22d37c/rate-test-model-22d37c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:03:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0dbad750-e65f-4460-bad2-f97b4a17b57e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T22:03:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0dbad750-e65f-4460-bad2-f97b4a17b57e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T22:03:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0dbad750-e65f-4460-bad2-f97b4a17b57e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T22:03:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0dbad750-e65f-4460-bad2-f97b4a17b57e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T22:03:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0dbad750-e65f-4460-bad2-f97b4a17b57e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T22:03:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9f7dde8-0bbd-4cac-931e-5b9b78858621","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:42654","PortSpecifier":{"PortValue":42654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c9f7dde8-0bbd-4cac-931e-5b9b78858621","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T22:03:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9f7dde8-0bbd-4cac-931e-5b9b78858621","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:42654","PortSpecifier":{"PortValue":42654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783721033,"nanos":541430806},"http":{"id":"c9f7dde8-0bbd-4cac-931e-5b9b78858621","method":"POST","headers":{":authority":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:03:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c9f7dde8-0bbd-4cac-931e-5b9b78858621","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T22:03:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c9f7dde8-0bbd-4cac-931e-5b9b78858621","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"]}} {"level":"debug","ts":"2026-07-10T22:03:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c9f7dde8-0bbd-4cac-931e-5b9b78858621","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4ee6ccd193f7699d3d2ac575d1fc0bc0af1de9d76c954edd7379fef966bdf49b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:03:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9f7dde8-0bbd-4cac-931e-5b9b78858621","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:03:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9f7dde8-0bbd-4cac-931e-5b9b78858621","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:03:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9f7dde8-0bbd-4cac-931e-5b9b78858621","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f937a7/rate-test-model-f937a7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:03:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c9f7dde8-0bbd-4cac-931e-5b9b78858621","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T22:03:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9f7dde8-0bbd-4cac-931e-5b9b78858621","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T22:03:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9f7dde8-0bbd-4cac-931e-5b9b78858621","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T22:03:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9f7dde8-0bbd-4cac-931e-5b9b78858621","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T22:03:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9f7dde8-0bbd-4cac-931e-5b9b78858621","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T22:03:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4ed297b-fc31-4aa8-89ce-5344294fd32b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60548","PortSpecifier":{"PortValue":60548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a4ed297b-fc31-4aa8-89ce-5344294fd32b","method":"POST","path":"/ai-tenant-e2e-shared-a-22d37c/rate-test-model-22d37c/v1/completions","host":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T22:03:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4ed297b-fc31-4aa8-89ce-5344294fd32b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60548","PortSpecifier":{"PortValue":60548}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783721033,"nanos":584598166},"http":{"id":"a4ed297b-fc31-4aa8-89ce-5344294fd32b","method":"POST","headers":{":authority":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-22d37c/rate-test-model-22d37c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:03:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a4ed297b-fc31-4aa8-89ce-5344294fd32b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6kf1joM5591Mjgqv_FIgJoge3lCNlFDTo3iRhsXjLaROrtseG4oe9lhbzo46"} {"level":"debug","ts":"2026-07-10T22:03:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a4ed297b-fc31-4aa8-89ce-5344294fd32b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-22d37c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6kf1joM5591Mjgqv_FIgJoge3lCNlFDTo3iRhsXjLaROrtseG4oe9lhbzo46\"}"} {"level":"debug","ts":"2026-07-10T22:03:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a4ed297b-fc31-4aa8-89ce-5344294fd32b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-22d37c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"014e5aa9-afc7-4ab7-a1e8-052d1a23bf1a","keyName":"e2e-rate-a-3f2323","subscription":"e2e-rate-iso-a-3f2323","tenant":"e2e-shared-a-22d37c","userId":"014e5aa9-afc7-4ab7-a1e8-052d1a23bf1a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T22:03:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a4ed297b-fc31-4aa8-89ce-5344294fd32b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-22d37c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-22d37c/rate-test-model-22d37c\",\"requestedSubscription\":\"e2e-rate-iso-a-3f2323\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T22:03:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a4ed297b-fc31-4aa8-89ce-5344294fd32b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-22d37c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-22d37c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3f2323","namespace":"ai-tenant-e2e-shared-a-22d37c","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T22:03:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a4ed297b-fc31-4aa8-89ce-5344294fd32b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:03:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4ed297b-fc31-4aa8-89ce-5344294fd32b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:03:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4ed297b-fc31-4aa8-89ce-5344294fd32b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:03:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4ed297b-fc31-4aa8-89ce-5344294fd32b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:03:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4ed297b-fc31-4aa8-89ce-5344294fd32b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-22d37c/rate-test-model-22d37c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:03:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4ed297b-fc31-4aa8-89ce-5344294fd32b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T22:03:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4ed297b-fc31-4aa8-89ce-5344294fd32b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3f2323"} {"level":"debug","ts":"2026-07-10T22:03:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4ed297b-fc31-4aa8-89ce-5344294fd32b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T22:03:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4ed297b-fc31-4aa8-89ce-5344294fd32b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"014e5aa9-afc7-4ab7-a1e8-052d1a23bf1a","keyName":"e2e-rate-a-3f2323","selected_subscription":"e2e-rate-iso-a-3f2323","selected_subscription_key":"ai-tenant-e2e-shared-a-22d37c/e2e-rate-iso-a-3f2323@ai-tenant-e2e-shared-a-22d37c/rate-test-model-22d37c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-22d37c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3f2323","namespace":"ai-tenant-e2e-shared-a-22d37c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T22:03:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4ed297b-fc31-4aa8-89ce-5344294fd32b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T22:03:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4ed297b-fc31-4aa8-89ce-5344294fd32b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T22:03:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad870d3a-e5e4-40f8-a4b7-f2781624a460","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60552","PortSpecifier":{"PortValue":60552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ad870d3a-e5e4-40f8-a4b7-f2781624a460","method":"POST","path":"/ai-tenant-e2e-shared-a-22d37c/rate-test-model-22d37c/v1/completions","host":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T22:03:54Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad870d3a-e5e4-40f8-a4b7-f2781624a460","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60552","PortSpecifier":{"PortValue":60552}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783721034,"nanos":646676069},"http":{"id":"ad870d3a-e5e4-40f8-a4b7-f2781624a460","method":"POST","headers":{":authority":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-22d37c/rate-test-model-22d37c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:03:54Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ad870d3a-e5e4-40f8-a4b7-f2781624a460","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6kf1joM5591Mjgqv_FIgJoge3lCNlFDTo3iRhsXjLaROrtseG4oe9lhbzo46"} {"level":"debug","ts":"2026-07-10T22:03:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ad870d3a-e5e4-40f8-a4b7-f2781624a460","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-22d37c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6kf1joM5591Mjgqv_FIgJoge3lCNlFDTo3iRhsXjLaROrtseG4oe9lhbzo46\"}"} {"level":"debug","ts":"2026-07-10T22:03:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ad870d3a-e5e4-40f8-a4b7-f2781624a460","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-22d37c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"014e5aa9-afc7-4ab7-a1e8-052d1a23bf1a","keyName":"e2e-rate-a-3f2323","subscription":"e2e-rate-iso-a-3f2323","tenant":"e2e-shared-a-22d37c","userId":"014e5aa9-afc7-4ab7-a1e8-052d1a23bf1a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T22:03:54Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ad870d3a-e5e4-40f8-a4b7-f2781624a460","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-22d37c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-22d37c/rate-test-model-22d37c\",\"requestedSubscription\":\"e2e-rate-iso-a-3f2323\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T22:03:54Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ad870d3a-e5e4-40f8-a4b7-f2781624a460","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-22d37c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-22d37c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3f2323","namespace":"ai-tenant-e2e-shared-a-22d37c","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T22:03:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ad870d3a-e5e4-40f8-a4b7-f2781624a460","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:03:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad870d3a-e5e4-40f8-a4b7-f2781624a460","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:03:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad870d3a-e5e4-40f8-a4b7-f2781624a460","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:03:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad870d3a-e5e4-40f8-a4b7-f2781624a460","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-22d37c/rate-test-model-22d37c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:03:54Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad870d3a-e5e4-40f8-a4b7-f2781624a460","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:03:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad870d3a-e5e4-40f8-a4b7-f2781624a460","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T22:03:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad870d3a-e5e4-40f8-a4b7-f2781624a460","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3f2323"} {"level":"debug","ts":"2026-07-10T22:03:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad870d3a-e5e4-40f8-a4b7-f2781624a460","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T22:03:54Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad870d3a-e5e4-40f8-a4b7-f2781624a460","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"014e5aa9-afc7-4ab7-a1e8-052d1a23bf1a","keyName":"e2e-rate-a-3f2323","selected_subscription":"e2e-rate-iso-a-3f2323","selected_subscription_key":"ai-tenant-e2e-shared-a-22d37c/e2e-rate-iso-a-3f2323@ai-tenant-e2e-shared-a-22d37c/rate-test-model-22d37c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-22d37c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3f2323","namespace":"ai-tenant-e2e-shared-a-22d37c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T22:03:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad870d3a-e5e4-40f8-a4b7-f2781624a460","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T22:03:54Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad870d3a-e5e4-40f8-a4b7-f2781624a460","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T22:03:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48b01868-6ff6-4c71-ba70-aa96b7867907","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60558","PortSpecifier":{"PortValue":60558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"48b01868-6ff6-4c71-ba70-aa96b7867907","method":"POST","path":"/ai-tenant-e2e-shared-a-22d37c/rate-test-model-22d37c/v1/completions","host":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T22:03:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48b01868-6ff6-4c71-ba70-aa96b7867907","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:60558","PortSpecifier":{"PortValue":60558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783721035,"nanos":692544603},"http":{"id":"48b01868-6ff6-4c71-ba70-aa96b7867907","method":"POST","headers":{":authority":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-22d37c/rate-test-model-22d37c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:03:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"48b01868-6ff6-4c71-ba70-aa96b7867907","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-6kf1joM5591Mjgqv_FIgJoge3lCNlFDTo3iRhsXjLaROrtseG4oe9lhbzo46"} {"level":"debug","ts":"2026-07-10T22:03:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"48b01868-6ff6-4c71-ba70-aa96b7867907","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-22d37c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-6kf1joM5591Mjgqv_FIgJoge3lCNlFDTo3iRhsXjLaROrtseG4oe9lhbzo46\"}"} {"level":"debug","ts":"2026-07-10T22:03:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"48b01868-6ff6-4c71-ba70-aa96b7867907","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-22d37c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"014e5aa9-afc7-4ab7-a1e8-052d1a23bf1a","keyName":"e2e-rate-a-3f2323","subscription":"e2e-rate-iso-a-3f2323","tenant":"e2e-shared-a-22d37c","userId":"014e5aa9-afc7-4ab7-a1e8-052d1a23bf1a","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T22:03:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"48b01868-6ff6-4c71-ba70-aa96b7867907","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-22d37c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-22d37c/rate-test-model-22d37c\",\"requestedSubscription\":\"e2e-rate-iso-a-3f2323\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T22:03:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"48b01868-6ff6-4c71-ba70-aa96b7867907","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-22d37c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-22d37c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3f2323","namespace":"ai-tenant-e2e-shared-a-22d37c","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T22:03:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"48b01868-6ff6-4c71-ba70-aa96b7867907","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:03:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48b01868-6ff6-4c71-ba70-aa96b7867907","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:03:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48b01868-6ff6-4c71-ba70-aa96b7867907","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:03:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48b01868-6ff6-4c71-ba70-aa96b7867907","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-22d37c/rate-test-model-22d37c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:03:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48b01868-6ff6-4c71-ba70-aa96b7867907","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:03:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48b01868-6ff6-4c71-ba70-aa96b7867907","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T22:03:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48b01868-6ff6-4c71-ba70-aa96b7867907","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3f2323"} {"level":"debug","ts":"2026-07-10T22:03:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48b01868-6ff6-4c71-ba70-aa96b7867907","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T22:03:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48b01868-6ff6-4c71-ba70-aa96b7867907","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"014e5aa9-afc7-4ab7-a1e8-052d1a23bf1a","keyName":"e2e-rate-a-3f2323","selected_subscription":"e2e-rate-iso-a-3f2323","selected_subscription_key":"ai-tenant-e2e-shared-a-22d37c/e2e-rate-iso-a-3f2323@ai-tenant-e2e-shared-a-22d37c/rate-test-model-22d37c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-22d37c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3f2323","namespace":"ai-tenant-e2e-shared-a-22d37c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T22:03:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48b01868-6ff6-4c71-ba70-aa96b7867907","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T22:03:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48b01868-6ff6-4c71-ba70-aa96b7867907","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T22:04:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec44dce0-2ec6-4eeb-ba7a-05ebb011ea52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:56142","PortSpecifier":{"PortValue":56142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ec44dce0-2ec6-4eeb-ba7a-05ebb011ea52","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T22:04:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec44dce0-2ec6-4eeb-ba7a-05ebb011ea52","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:56142","PortSpecifier":{"PortValue":56142}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783721049,"nanos":463593583},"http":{"id":"ec44dce0-2ec6-4eeb-ba7a-05ebb011ea52","method":"POST","headers":{":authority":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:04:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ec44dce0-2ec6-4eeb-ba7a-05ebb011ea52","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T22:04:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ec44dce0-2ec6-4eeb-ba7a-05ebb011ea52","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"]}} {"level":"debug","ts":"2026-07-10T22:04:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ec44dce0-2ec6-4eeb-ba7a-05ebb011ea52","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4e453737804b21837c343736e1d1641468db9507ae64fabac5d82ca79ddf2f34"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:04:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec44dce0-2ec6-4eeb-ba7a-05ebb011ea52","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:04:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec44dce0-2ec6-4eeb-ba7a-05ebb011ea52","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:04:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec44dce0-2ec6-4eeb-ba7a-05ebb011ea52","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-22d37c/rate-test-model-22d37c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:04:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ec44dce0-2ec6-4eeb-ba7a-05ebb011ea52","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T22:04:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec44dce0-2ec6-4eeb-ba7a-05ebb011ea52","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T22:04:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec44dce0-2ec6-4eeb-ba7a-05ebb011ea52","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T22:04:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec44dce0-2ec6-4eeb-ba7a-05ebb011ea52","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T22:04:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec44dce0-2ec6-4eeb-ba7a-05ebb011ea52","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T22:04:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"11e40588-32e9-4762-8438-87790ae994ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:33684","PortSpecifier":{"PortValue":33684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"11e40588-32e9-4762-8438-87790ae994ae","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T22:04:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"11e40588-32e9-4762-8438-87790ae994ae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:33684","PortSpecifier":{"PortValue":33684}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783721049,"nanos":504059528},"http":{"id":"11e40588-32e9-4762-8438-87790ae994ae","method":"POST","headers":{":authority":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:04:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"11e40588-32e9-4762-8438-87790ae994ae","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-10T22:04:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"11e40588-32e9-4762-8438-87790ae994ae","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"]}} {"level":"debug","ts":"2026-07-10T22:04:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"11e40588-32e9-4762-8438-87790ae994ae","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/f284fb5810ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=5ce7c11e-e5d4-4ea0-b601-e2699b4b1e81"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"97f0f53c-b1ad-4177-8fec-234ad1c5629f","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4ee6ccd193f7699d3d2ac575d1fc0bc0af1de9d76c954edd7379fef966bdf49b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.66:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:04:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11e40588-32e9-4762-8438-87790ae994ae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:04:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11e40588-32e9-4762-8438-87790ae994ae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:04:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"11e40588-32e9-4762-8438-87790ae994ae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f937a7/rate-test-model-f937a7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:04:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"11e40588-32e9-4762-8438-87790ae994ae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-10T22:04:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11e40588-32e9-4762-8438-87790ae994ae","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T22:04:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"11e40588-32e9-4762-8438-87790ae994ae","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-10T22:04:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"11e40588-32e9-4762-8438-87790ae994ae","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T22:04:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"11e40588-32e9-4762-8438-87790ae994ae","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T22:04:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"019e31bf-8fe0-44e9-a9a5-1c3626a10ca0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:56144","PortSpecifier":{"PortValue":56144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"019e31bf-8fe0-44e9-a9a5-1c3626a10ca0","method":"POST","path":"/ai-tenant-e2e-shared-a-22d37c/rate-test-model-22d37c/v1/completions","host":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T22:04:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"019e31bf-8fe0-44e9-a9a5-1c3626a10ca0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:56144","PortSpecifier":{"PortValue":56144}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783721049,"nanos":537243331},"http":{"id":"019e31bf-8fe0-44e9-a9a5-1c3626a10ca0","method":"POST","headers":{":authority":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-22d37c/rate-test-model-22d37c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:04:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"019e31bf-8fe0-44e9-a9a5-1c3626a10ca0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-NgdvmbhwsMlaqMw4_LVUf798JMVv6xvIXmJ5Qi56MiK3lo4QO7eyDjT4RHr1"} {"level":"debug","ts":"2026-07-10T22:04:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"019e31bf-8fe0-44e9-a9a5-1c3626a10ca0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-22d37c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-NgdvmbhwsMlaqMw4_LVUf798JMVv6xvIXmJ5Qi56MiK3lo4QO7eyDjT4RHr1\"}"} {"level":"debug","ts":"2026-07-10T22:04:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"019e31bf-8fe0-44e9-a9a5-1c3626a10ca0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-22d37c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2db73a2c-ddb2-4714-9399-debf802a145d","keyName":"e2e-rate-a-abf64e","subscription":"e2e-rate-iso-a-abf64e","tenant":"e2e-shared-a-22d37c","userId":"2db73a2c-ddb2-4714-9399-debf802a145d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T22:04:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"019e31bf-8fe0-44e9-a9a5-1c3626a10ca0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-22d37c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-22d37c/rate-test-model-22d37c\",\"requestedSubscription\":\"e2e-rate-iso-a-abf64e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T22:04:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"019e31bf-8fe0-44e9-a9a5-1c3626a10ca0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-22d37c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-22d37c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-abf64e","namespace":"ai-tenant-e2e-shared-a-22d37c","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T22:04:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"019e31bf-8fe0-44e9-a9a5-1c3626a10ca0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:04:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"019e31bf-8fe0-44e9-a9a5-1c3626a10ca0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:04:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"019e31bf-8fe0-44e9-a9a5-1c3626a10ca0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:04:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"019e31bf-8fe0-44e9-a9a5-1c3626a10ca0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:04:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"019e31bf-8fe0-44e9-a9a5-1c3626a10ca0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-22d37c/rate-test-model-22d37c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:04:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"019e31bf-8fe0-44e9-a9a5-1c3626a10ca0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-abf64e"} {"level":"debug","ts":"2026-07-10T22:04:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"019e31bf-8fe0-44e9-a9a5-1c3626a10ca0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T22:04:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"019e31bf-8fe0-44e9-a9a5-1c3626a10ca0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T22:04:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"019e31bf-8fe0-44e9-a9a5-1c3626a10ca0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2db73a2c-ddb2-4714-9399-debf802a145d","keyName":"e2e-rate-a-abf64e","selected_subscription":"e2e-rate-iso-a-abf64e","selected_subscription_key":"ai-tenant-e2e-shared-a-22d37c/e2e-rate-iso-a-abf64e@ai-tenant-e2e-shared-a-22d37c/rate-test-model-22d37c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-22d37c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-abf64e","namespace":"ai-tenant-e2e-shared-a-22d37c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T22:04:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"019e31bf-8fe0-44e9-a9a5-1c3626a10ca0","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T22:04:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"019e31bf-8fe0-44e9-a9a5-1c3626a10ca0","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T22:04:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a7438ef-90b8-4a55-8a9f-de9e7929c2dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:56156","PortSpecifier":{"PortValue":56156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6a7438ef-90b8-4a55-8a9f-de9e7929c2dc","method":"POST","path":"/ai-tenant-e2e-shared-a-22d37c/rate-test-model-22d37c/v1/completions","host":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T22:04:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a7438ef-90b8-4a55-8a9f-de9e7929c2dc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:56156","PortSpecifier":{"PortValue":56156}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783721050,"nanos":574378167},"http":{"id":"6a7438ef-90b8-4a55-8a9f-de9e7929c2dc","method":"POST","headers":{":authority":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-22d37c/rate-test-model-22d37c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:04:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6a7438ef-90b8-4a55-8a9f-de9e7929c2dc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-NgdvmbhwsMlaqMw4_LVUf798JMVv6xvIXmJ5Qi56MiK3lo4QO7eyDjT4RHr1"} {"level":"debug","ts":"2026-07-10T22:04:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a7438ef-90b8-4a55-8a9f-de9e7929c2dc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-22d37c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-NgdvmbhwsMlaqMw4_LVUf798JMVv6xvIXmJ5Qi56MiK3lo4QO7eyDjT4RHr1\"}"} {"level":"debug","ts":"2026-07-10T22:04:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a7438ef-90b8-4a55-8a9f-de9e7929c2dc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-22d37c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2db73a2c-ddb2-4714-9399-debf802a145d","keyName":"e2e-rate-a-abf64e","subscription":"e2e-rate-iso-a-abf64e","tenant":"e2e-shared-a-22d37c","userId":"2db73a2c-ddb2-4714-9399-debf802a145d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T22:04:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6a7438ef-90b8-4a55-8a9f-de9e7929c2dc","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-22d37c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-22d37c/rate-test-model-22d37c\",\"requestedSubscription\":\"e2e-rate-iso-a-abf64e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T22:04:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6a7438ef-90b8-4a55-8a9f-de9e7929c2dc","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-22d37c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-22d37c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-abf64e","namespace":"ai-tenant-e2e-shared-a-22d37c","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T22:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6a7438ef-90b8-4a55-8a9f-de9e7929c2dc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a7438ef-90b8-4a55-8a9f-de9e7929c2dc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a7438ef-90b8-4a55-8a9f-de9e7929c2dc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a7438ef-90b8-4a55-8a9f-de9e7929c2dc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-22d37c/rate-test-model-22d37c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:04:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a7438ef-90b8-4a55-8a9f-de9e7929c2dc","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:04:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a7438ef-90b8-4a55-8a9f-de9e7929c2dc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-abf64e"} {"level":"debug","ts":"2026-07-10T22:04:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a7438ef-90b8-4a55-8a9f-de9e7929c2dc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T22:04:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a7438ef-90b8-4a55-8a9f-de9e7929c2dc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T22:04:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a7438ef-90b8-4a55-8a9f-de9e7929c2dc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2db73a2c-ddb2-4714-9399-debf802a145d","keyName":"e2e-rate-a-abf64e","selected_subscription":"e2e-rate-iso-a-abf64e","selected_subscription_key":"ai-tenant-e2e-shared-a-22d37c/e2e-rate-iso-a-abf64e@ai-tenant-e2e-shared-a-22d37c/rate-test-model-22d37c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-22d37c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-abf64e","namespace":"ai-tenant-e2e-shared-a-22d37c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T22:04:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a7438ef-90b8-4a55-8a9f-de9e7929c2dc","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T22:04:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a7438ef-90b8-4a55-8a9f-de9e7929c2dc","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T22:04:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d83fc42a-0a4d-46d8-a587-f218818ea086","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:56162","PortSpecifier":{"PortValue":56162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d83fc42a-0a4d-46d8-a587-f218818ea086","method":"POST","path":"/ai-tenant-e2e-shared-a-22d37c/rate-test-model-22d37c/v1/completions","host":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T22:04:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d83fc42a-0a4d-46d8-a587-f218818ea086","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:56162","PortSpecifier":{"PortValue":56162}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783721051,"nanos":610115261},"http":{"id":"d83fc42a-0a4d-46d8-a587-f218818ea086","method":"POST","headers":{":authority":"e2e-shared-a-22d37c.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-22d37c/rate-test-model-22d37c/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:04:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d83fc42a-0a4d-46d8-a587-f218818ea086","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-NgdvmbhwsMlaqMw4_LVUf798JMVv6xvIXmJ5Qi56MiK3lo4QO7eyDjT4RHr1"} {"level":"debug","ts":"2026-07-10T22:04:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d83fc42a-0a4d-46d8-a587-f218818ea086","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-22d37c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-NgdvmbhwsMlaqMw4_LVUf798JMVv6xvIXmJ5Qi56MiK3lo4QO7eyDjT4RHr1\"}"} {"level":"debug","ts":"2026-07-10T22:04:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d83fc42a-0a4d-46d8-a587-f218818ea086","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-22d37c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2db73a2c-ddb2-4714-9399-debf802a145d","keyName":"e2e-rate-a-abf64e","subscription":"e2e-rate-iso-a-abf64e","tenant":"e2e-shared-a-22d37c","userId":"2db73a2c-ddb2-4714-9399-debf802a145d","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T22:04:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d83fc42a-0a4d-46d8-a587-f218818ea086","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-22d37c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-22d37c/rate-test-model-22d37c\",\"requestedSubscription\":\"e2e-rate-iso-a-abf64e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T22:04:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d83fc42a-0a4d-46d8-a587-f218818ea086","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-22d37c.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-22d37c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-abf64e","namespace":"ai-tenant-e2e-shared-a-22d37c","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T22:04:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d83fc42a-0a4d-46d8-a587-f218818ea086","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:04:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d83fc42a-0a4d-46d8-a587-f218818ea086","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:04:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d83fc42a-0a4d-46d8-a587-f218818ea086","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:04:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d83fc42a-0a4d-46d8-a587-f218818ea086","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:04:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d83fc42a-0a4d-46d8-a587-f218818ea086","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-22d37c/rate-test-model-22d37c\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:04:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d83fc42a-0a4d-46d8-a587-f218818ea086","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-abf64e"} {"level":"debug","ts":"2026-07-10T22:04:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d83fc42a-0a4d-46d8-a587-f218818ea086","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T22:04:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d83fc42a-0a4d-46d8-a587-f218818ea086","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T22:04:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d83fc42a-0a4d-46d8-a587-f218818ea086","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2db73a2c-ddb2-4714-9399-debf802a145d","keyName":"e2e-rate-a-abf64e","selected_subscription":"e2e-rate-iso-a-abf64e","selected_subscription_key":"ai-tenant-e2e-shared-a-22d37c/e2e-rate-iso-a-abf64e@ai-tenant-e2e-shared-a-22d37c/rate-test-model-22d37c","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-22d37c","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-abf64e","namespace":"ai-tenant-e2e-shared-a-22d37c","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T22:04:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d83fc42a-0a4d-46d8-a587-f218818ea086","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T22:04:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d83fc42a-0a4d-46d8-a587-f218818ea086","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T22:04:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ede5cc6-02fa-41da-8e7b-d311e31e154b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:33686","PortSpecifier":{"PortValue":33686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1ede5cc6-02fa-41da-8e7b-d311e31e154b","method":"POST","path":"/ai-tenant-e2e-shared-b-f937a7/rate-test-model-f937a7/v1/completions","host":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-10T22:04:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1ede5cc6-02fa-41da-8e7b-d311e31e154b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.8:33686","PortSpecifier":{"PortValue":33686}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.66:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783721051,"nanos":642706071},"http":{"id":"1ede5cc6-02fa-41da-8e7b-d311e31e154b","method":"POST","headers":{":authority":"e2e-shared-b-f937a7.apps.31a02d85-51b5-4899-ac82-f284fb5810ab.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-f937a7/rate-test-model-f937a7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:04:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1ede5cc6-02fa-41da-8e7b-d311e31e154b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-pF93ShP4Tz7eQ5N5_O24pkeZHWUtA5Ibt5bCpnExfJQr0EstMZieB28VMLuL"} {"level":"debug","ts":"2026-07-10T22:04:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1ede5cc6-02fa-41da-8e7b-d311e31e154b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-f937a7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-pF93ShP4Tz7eQ5N5_O24pkeZHWUtA5Ibt5bCpnExfJQr0EstMZieB28VMLuL\"}"} {"level":"debug","ts":"2026-07-10T22:04:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1ede5cc6-02fa-41da-8e7b-d311e31e154b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f937a7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f32d5dc4-0942-4237-9f2f-62b212cae0fb","keyName":"e2e-rate-b-abf64e","subscription":"e2e-rate-iso-b-abf64e","tenant":"e2e-shared-b-f937a7","userId":"f32d5dc4-0942-4237-9f2f-62b212cae0fb","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-10T22:04:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1ede5cc6-02fa-41da-8e7b-d311e31e154b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-f937a7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-f937a7/rate-test-model-f937a7\",\"requestedSubscription\":\"e2e-rate-iso-b-abf64e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-10T22:04:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1ede5cc6-02fa-41da-8e7b-d311e31e154b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-f937a7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f937a7","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-abf64e","namespace":"ai-tenant-e2e-shared-b-f937a7","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-10T22:04:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1ede5cc6-02fa-41da-8e7b-d311e31e154b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-10T22:04:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ede5cc6-02fa-41da-8e7b-d311e31e154b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:04:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ede5cc6-02fa-41da-8e7b-d311e31e154b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:04:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ede5cc6-02fa-41da-8e7b-d311e31e154b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-f937a7/rate-test-model-f937a7\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:04:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1ede5cc6-02fa-41da-8e7b-d311e31e154b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-10T22:04:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ede5cc6-02fa-41da-8e7b-d311e31e154b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-10T22:04:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ede5cc6-02fa-41da-8e7b-d311e31e154b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-10T22:04:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ede5cc6-02fa-41da-8e7b-d311e31e154b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-abf64e"} {"level":"debug","ts":"2026-07-10T22:04:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1ede5cc6-02fa-41da-8e7b-d311e31e154b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f32d5dc4-0942-4237-9f2f-62b212cae0fb","keyName":"e2e-rate-b-abf64e","selected_subscription":"e2e-rate-iso-b-abf64e","selected_subscription_key":"ai-tenant-e2e-shared-b-f937a7/e2e-rate-iso-b-abf64e@ai-tenant-e2e-shared-b-f937a7/rate-test-model-f937a7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f937a7","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-abf64e","namespace":"ai-tenant-e2e-shared-b-f937a7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-10T22:04:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ede5cc6-02fa-41da-8e7b-d311e31e154b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-10T22:04:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1ede5cc6-02fa-41da-8e7b-d311e31e154b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-10T22:04:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/54a372ee49ecf297845253f7e788f971948e8e5436c2ddf473bd912ed8d0ea4c"} {"level":"info","ts":"2026-07-10T22:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7abad201ece8b77ccbaa14fce80032e1899146059f1b5ae96a17993a8ec0ac3"} {"level":"info","ts":"2026-07-10T22:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a96f65ef97b868da9b61e5200626a3f9596f356385b001ba035ee81a660a0e46"} {"level":"info","ts":"2026-07-10T22:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ccc12ee843a0197943f9ea30b342d13a6b3eebf4bd62efe1a3662482b7e2006c"} {"level":"info","ts":"2026-07-10T22:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c95e55f2a0d3597b29ebca35af78254092516fb60e5d615d869f9f6d564d7aef"} {"level":"info","ts":"2026-07-10T22:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f48b631e1731c40d64a343950b391f81f57f82d796628051c9bc0111caf0b827"} {"level":"info","ts":"2026-07-10T22:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/52ab1d2b607f92203a7a2f83c7a1f5c1fb8f8235fcbecf92f7bad955ba1493de"} {"level":"info","ts":"2026-07-10T22:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09305b8770e2b7363f48da6696fa1b173c4c96e28670bbcced045893be06a905"} {"level":"info","ts":"2026-07-10T22:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/654669fd0648c35d66ccb0b75e548d02899a1de3dd880830432f0c40444ed795"} {"level":"info","ts":"2026-07-10T22:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aad7998ef534623339d6dad4f9ce39357702dea90ac3e42cb2819452bbae82e1"} {"level":"info","ts":"2026-07-10T22:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cdbcd029ae0a5d9c81c3f11420d8c9f4eddcf6d9e0ae4659e8569148695b0c4a"} {"level":"info","ts":"2026-07-10T22:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db69c852daa713e8ceaf6023eef53d3444265679461b0cb61da1d1c14a21a2f1"} {"level":"info","ts":"2026-07-10T22:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b2145ae6d948330ef6bc37d6cf4d9e071d74d70fdf874ea8dc39abdc4a970a38"} {"level":"info","ts":"2026-07-10T22:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2daba03eb9fd8fa7f81f9df02c2db2f0df7e27e9f236a2a266d0bef30e958387"} {"level":"info","ts":"2026-07-10T22:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ff2f90123fb6e8e8dd9356c8515129ed7643077c95efbd3b5992e9dd7995417"} {"level":"info","ts":"2026-07-10T22:04:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b6842bd97cb50c4cb14dc9b956b8600ba1eb51a6a1b472ae5c99f10f9cf9d83e"} {"level":"info","ts":"2026-07-10T22:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/69830b596606ab5bdce8b430a5c4b2cacc0abc7950fa8ce038a7816dbae27c96"} {"level":"info","ts":"2026-07-10T22:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8566544751d451d6562df1499b985efb50b4220a986a2712dde6f4bd1a27898a"} {"level":"info","ts":"2026-07-10T22:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e453737804b21837c343736e1d1641468db9507ae64fabac5d82ca79ddf2f34"} {"level":"info","ts":"2026-07-10T22:04:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c2ce3c04cca05a440d30c1000fafd89d41c12cfafd9c0fe53e35d513d976dc7"} {"level":"info","ts":"2026-07-10T22:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ee6ccd193f7699d3d2ac575d1fc0bc0af1de9d76c954edd7379fef966bdf49b"} {"level":"info","ts":"2026-07-10T22:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f92327560fbb6b041809a439f337fe3c4618adf05e786796fae9dc2363b6996"} {"level":"info","ts":"2026-07-10T22:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8cf15b8af555d6bf30162ba84362b38e75fa80217b8f39ee0d5c2ba6a1fa06f0"} {"level":"info","ts":"2026-07-10T22:05:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a0236f46ae13e22fb52dc65a8d59c8500c8528ab9b450983a4374255818f985"}